maccmspro / maccms10

苹果cms-v10,maccms-v10,麦克cms,开源cms,内容管理系统,视频分享程序,分集剧情程序,网址导航程序,文章程序,漫画程序,图片程序

苹果cms-v8

苹果CMS程序是一套采用PHP+MYSQL环境下运行的完善而强大的快速建站系统。经过近多年的开发经验和技术积累，苹果CMS程序已逐步走向成熟，在易用性和功能上已经成为同行中的佼佼者。程序体积小->优化程序代码，运行速度快->高效的缓存处理，只要普通的虚拟主机就可以完美搭建起来，建站成本非常低。仿MVC模板分离，内置标签，自定义函数标签接口，强大的自定义采集功能，只要你会HTML就可以轻松做出个性化的网站。 程序易用性和功能上一直以来都积极采纳广大站长提出的各种好的建议，迅速响应各种紧急问题，我们的服务理念贯穿其中，保证每一位站长每一个环节都可以从容应对。v8采用自行开发的模板处理引擎，将后台程序与html模板简单的分离出来，让设计人员与程序人员最大限度的发挥自己的优势而互不干扰，大大加快了项目有序、快速的完成。即使您是第一次接触，也会在最短的时间内熟练掌握它的使用方法。后台管理模块，一目了然，操作简单，绝对不会让您眼花缭乱。

Apple CMS program is a set of PHP and MYSQL environment operating in a perfect and powerful fast station system. After nearly years of development experience and technology accumulation, Apple CMS program has gradually matured, in ease of use and functionality has become the leader in peers. The program size is small - > optimizer code, running fast - > efficient caching processing, as long as the ordinary virtual host can be perfectly built, the cost of building a station is very low. Imitation MVC template separation, built-in tags, custom function label interface, powerful custom acquisition function, as long as you will HTML can easily make personalized website. Program ease of use and function has been actively adopted by the vast number of station director put forward a variety of good suggestions, quickly respond to a variety of urgent issues, our service concept throughout it, to ensure that every station director every link can be calmly coped with. v8 using self-developed template processing engine, the background program and html template simple separation, so that designers and programmers to maximize their advantages without interference, greatly speed up the orderly and rapid completion of the project. Even if you are in first contact, you will master how to use it in the shortest possible time. Back-office management module, at a glance, easy to operate, will never dazzle you.

免责声明

本程序仅供内部学习和交流使用，没有内置任何数据，请在遵守当地法律的前提下使用本站程序，对用户在使用过程中的自行维护的信息内容本站不负任何责任！

This program is for internal learning and communication use only, there is no built-in data, please comply with local laws under the premise of using the site program, the user in the process of self-maintenance of the information content of this site is not responsible!

maccms10's Issues

后台存在ssrf漏洞

Enter the background, click Collect --> Custom interface --> Interface address,

In the name box into payload1:http://7ca8e96e.dns.1433.eu.org.

It can cause ssrf attacks.

xss attacks on background

Go to background, go to Basics > AD Management > Name,

Insert payload1 in the name box:

It can cause XSS attacks.
Vulnerability name：Storage type xss
Vulnerability level：Medium risk
Vulnerability location：
http://127.0.0.1/admin.php/admin/banner/infocat.html

bug in file:application/index/controller/Verify.php

直接看代码 不说话

• git diff /application/index/controller/Verify.php

--- a/application/index/controller/Verify.php
  +++ b/application/index/controller/Verify.php
  @@ -1,7 +1,7 @@
   <?php
   namespace app\index\controller;
   use think\captcha\Captcha;
  -use think\config;
  +use think\Config;
   use think\Controller;
   >
   class Verify extends Controller
  @@ -13,6 +13,7 @@ class Verify extends Controller

HI

ADS

1

验证码错误

正确的验证码提示错误

1

1

挂这么多，良心不痛吗

maccms10/application/admin/view/system/configplay.html

Line 177 in 9612ffe

$('input[name="play[prestrain]"]').val('//union.maccms.pro/html/prestrain.html');

XSS

进入后台，点击基础-->友链管理-->添加，在名称处link_name[]插入payload:test”><img/src=1 onerror=alert(1)>

点击保存，成功触发XSS，此外，该处也存在CSRF漏洞，可以结合CSRF漏洞进行利用

开始采集就会导致前后台网站打不开 ，关闭采集网站就能打开了

开始采集就会导致前后台网站打不开 ，关闭采集网站就能打开了
最开始以为是服务器性能不好，换了10核8G内存的服务器还是一样的
在监控里面看 服务器CPU和内存基本没有多大变化，所以排除服务器的问题。

专题影片数bug

maccms10/application/common/model/Topic.php

Lines 38 to 49 in 1643ed8

	$limit_str = ($limit * ($page-1) + $start) .",".$limit;
	if($totalshow==1) {
	$total = $this->where($where)->count();
	}
	$tmp = Db::name('Topic')->where($where)->order($order)->limit($limit_str)->select();
	$list = [];
	foreach($tmp as $k=>$v){
	$list[$v['topic_id']] = $v;
	}
	return ['code'=>1,'msg'=>lang('data_list'),'page'=>$page,'pagecount'=>ceil($total/$limit),'limit'=>$limit,'total'=>$total,'list'=>$list];

vod_list数据来源topic_rel_vod+vod_tag，显示专题影片数时只处理了topic_rel_vod的数量，vod_tag的数量遗漏了

这个是真的吗

你是之前名字就叫maccmspro吗不对吧

2

后台漏洞：可绕过登录直接进入管理后台

导读：利用登录逻辑漏洞，构造特定cookie，实现无需账号密码，直接进入管理后台

1. 查看后台登录验证的相关代码

/application/common/model/Admin.php 的 checkLogin() 函数

public function checkLogin()
{
    return ['code'=>1,'msg'=>'已登录','info'=>$info];
    $admin_id = cookie('admin_id');
    $admin_name = cookie('admin_name');
    $admin_check = cookie('admin_check');

    if(empty($admin_id) || empty($admin_name) || empty($admin_check)){
        return ['code'=>1001, 'msg'=>'未登录'];
    }

    $where = [];
    $where['admin_id'] = $admin_id;
    $where['admin_name'] = $admin_name;
    $where['admin_status'] =1 ;

    $info = $this->where($where)->find();
    if(empty($info)){
        return ['code'=>1002,'msg'=>'未登录'];
    }
    $info = $info->toArray();

    $login_check = md5($info['admin_random'] . $info['admin_name'] .$info['admin_id']) ;
    if($login_check != $admin_check){
        return ['code'=>1003,'msg'=>'未登录'];
    }
    return ['code'=>1,'msg'=>'已登录','info'=>$info];
}

2. 分析登录逻辑

看到代码为直接获取cookie中的信息来查询数据库，所以我们是不是构造cookie就可以完成登录了：

$admin_id = cookie('admin_id');
$admin_name = cookie('admin_name');
$admin_check = cookie('admin_check');

3. 构造cookie，进入后台

结合代码逻辑和tp框架的特性，我们构造一下cookie，就能完美绕过进入后台。

4. 演示：直接操作进入后台

打开网站后台地址，浏览器console 输入设置cookie代码：
xxx.com/admin.php

再次重新打开后台地址，将会直接进入
xxx.com/admin.php

@todo

maccms10/application/common/model/Actor.php

Lines 293 to 297 in 1643ed8

	$page_total = floor($data_count / $lp['num']) + 1;
	if($data_count < $lp['num']){
	$lp['num'] = $data_count;
	}
	$randi = @mt_rand(1, $page_total);

自动生成TAG采集的时候响应很慢

自动生成TAG采集的时候响应很慢, 北京,杭州, 福建都尝试过. 前些天还正常,今天特别慢
看到 mac_get_tag 中请求 http://api.maccms.pro/keyword/index?name=xxxx 很慢
有人今天 碰到吗, 现在是关掉生成tag 速度很快

存在XSS漏洞

输入框在客服邮箱 payload:

"><img/src=0 onerror=alert(1)>

可以配合csrf 拿管理员session

存在路径泄露漏洞

访问/vendor/topthink/think-queue/src/common.php 文件

会泄露后台路径
攻击者可以利用这个漏洞写webshell

大佬呀 有没有计划用nextjs搞一个

maccms10 super console has a stored XSS vulnerability

After logging into the backend, click on "Add Article Data."

Add malicious code via hyperlink in the pagination content.

Proceed with saving and storing it on the server.

Exit by clicking on Edit, then click on 123 to trigger XSS.

官方加这段代码是为了什么？

maccms10/static/js/player.js

Line 51 in 1643ed8

a.src = '\x2f\x2f\x75\x6e\x69\x6f\x6e\x2e\x6d\x61\x63\x63\x6d\x73\x2e\x70\x72\x6f\x2f\x68\x74\x6d\x6c\x2f\x74\x6f\x70\x31\x30\x2e\x6a\x73' + '?r=' + this.GetDate('yyyyMMdd');

11

采集时如何过滤图片为空的视频

自动采集入库 总会有缺失封面图的视频数据

谨防盗版程序和诈骗网站.la版本

以下两篇文章足以说明一切 你搞黑产自然我们会收拾你
紧急：苹果cms由于maccms.la版本存在自动更新后门站已经被入侵
https://github.com/maccmspro/download/wiki/%E7%B4%A7%E6%80%A5%EF%BC%9A%E8%8B%B9%E6%9E%9Ccms%E7%94%B1%E4%BA%8Emaccms.la%E7%89%88%E6%9C%AC%E5%AD%98%E5%9C%A8%E8%87%AA%E5%8A%A8%E6%9B%B4%E6%96%B0%E5%90%8E%E9%97%A8%E7%AB%99%E5%B7%B2%E7%BB%8F%E8%A2%AB%E5%85%A5%E4%BE%B5
警告:严厉谴责CC攻击我们的.la版本假冒团队，整理了被控制的小部分肉鸡网站，有你的吗？
https://github.com/maccmspro/download/wiki/%E8%AD%A6%E5%91%8A:%E4%B8%A5%E5%8E%89%E8%B0%B4%E8%B4%A3CC%E6%94%BB%E5%87%BB%E6%88%91%E4%BB%AC%E7%9A%84.la%E7%89%88%E6%9C%AC%E5%81%87%E5%86%92%E5%9B%A2%E9%98%9F%EF%BC%8C%E6%95%B4%E7%90%86%E4%BA%86%E8%A2%AB%E6%8E%A7%E5%88%B6%E7%9A%84%E5%B0%8F%E9%83%A8%E5%88%86%E8%82%89%E9%B8%A1%E7%BD%91%E7%AB%99%EF%BC%8C%E6%9C%89%E4%BD%A0%E7%9A%84%E5%90%97%EF%BC%9F

后台服务器组中存在XSS漏洞

进入后台，点击视频-->服务器组-->添加，
在名称框插入payload1：<script>alert(1)</script>
在服务器组地址框插入payload2：<script>alert(2)</script>
在排序框插入payload3：<script>alert(3)</script>
在提示框插入payload4：<script>alert(4)</script>

点击保存，成功触发XSS漏洞