Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
MacCMS Member Order Detail User.php order_info authorization
Vulnerability Description
A weakness has been identified in MacCMS up to 2025.1000.4052. This vulnerability affects the function order_info of the file application/index/controller/User.php of the component Member Order Detail Interface. This manipulation of the argument order_id causes authorization bypass. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Vulnerability Type
通过用户控制密钥绕过授权机制
Vulnerability Title
maccms 安全漏洞
Vulnerability Description
maccms是magicblack开源的一套采用 PHP+MYSQL 环境下运行的完善而强大的快速建站系统。 MacCMS 2025.1000.4052及之前版本存在安全漏洞，该漏洞源于对文件application/index/controller/User.php中Member Order Detail Interface组件的order_id参数操作不当，可能导致授权绕过。
CVSS Information
N/A
Vulnerability Type
N/A