CyberRota Analysis
AI-GeneratedThe vulnerability affects the admin template editor of MacCMS10, where an incomplete blacklist allows authenticated administrators to exploit the system by injecting malicious PHP code that can lead to remote code execution. This poses a significant risk, as attackers could execute arbitrary commands on the server, compromising its integrity and confidentiality. Organizations using MacCMS10 should prioritize patching this vulnerability to safeguard against potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
MacCMS10's admin template editor (application/admin/controller/Template.php) blocks dangerous PHP functions in template content via a blacklist regex, but the blacklist omitted exec, passthru, popen, show_source, create_function, register_shutdown_function, register_tick_function, and error_log.