Incorrect Access Control in Maccms v10 v2026.1000.4055

Executive Summary

This vulnerability is an Incorrect Access Control issue in the /api.php/user/get_list endpoint of Maccms v10 v2026.1000.4055. The endpoint does not require authentication or authorization checks, allowing unauthenticated remote attackers to access sensitive user data by sending crafted HTTP GET requests with limit and offset parameters.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, check if your Maccms v10 v2026.1000.4055 system exposes the /api.php/user/get_list endpoint without authentication. Use curl to send a GET request to the endpoint and verify if it returns user data without requiring credentials. Example command: curl -v http://<target>/api.php/user/get_list?limit=10&offset=0

If the endpoint responds with user information without authentication, the system is vulnerable. Inspect network traffic for unauthorized access attempts to this path.

Useful 0 Not Useful 0

Impact Analysis

An attacker could exploit this to retrieve all registered users' sensitive information, including usernames, emails, or other personal data. This could lead to privacy breaches, identity theft, or unauthorized access to user accounts if combined with other exploits.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability likely violates GDPR and HIPAA by exposing personal data without proper access controls. GDPR requires strict data protection and user consent, while HIPAA mandates safeguards for protected health information. Unauthorized access risks non-compliance and potential fines.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately restrict access to the /api.php/user/get_list endpoint by implementing authentication and authorization checks. Update Maccms to the latest patched version if available. Temporarily block external access to this endpoint via firewall rules until a fix is applied.

Useful 0 Not Useful 0