In maccms v10, an attacker can log in through /index.php/user/login in the "col" and "openid" parameters to gain privileges.

Published Mar 16, 2022 · Updated Aug 4, 2024 · Assigned by mitre