CVE:CVE-2022-35148
CNNVD:CNNVD-202208-3320
maccms10是magicblack开源的一套采用 PHP+MYSQL 环境下运行的完善而强大的快速建站系统。
maccms10 v2021.1000.1081至v2022.1000.3031版本存在安全漏洞，该漏洞源于其database/columns.html页面的table参数存在SQL注入。
solution:Upgrade maccms maccms to a higher version than 10.0:2021.1000.1081,10.0:2022.1000.1099,10.0:2022.1000.3001,10.0:2022.1000.3002,10.0:2022.1000.3004,10.0:2022.1000.3005,10.0:2022.1000.3025,10.0:2022.1000.3026,10.0:2022.1000.3027,10.0:2022.1000.3028,10.0:2022.1000.3029,10.0:2022.1000.3030,10.0:2022.1000.3031,and avoid the version 10.0:2021.1000.1081,10.0:2022.1000.1099,10.0:2022.1000.3001,10.0:2022.1000.3002,10.0:2022.1000.3004,10.0:2022.1000.3005,10.0:2022.1000.3025,10.0:2022.1000.3026,10.0:2022.1000.3027,10.0:2022.1000.3028,10.0:2022.1000.3029,10.0:2022.1000.3030,10.0:2022.1000.3031