Server-Side Request Forgery

Every one of the 4 is a mark on the map. Named now: 1 to 4, most at risk first.

1. mccms Comic.php pic_save server-side request forgeryCVE-2023-3236Chshcms · CVSS 6.3 · 0.7% likely

   CWE-918

2. mccms Comic.php pic_api server-side request forgeryCVE-2023-3235Chshcms · CVSS 6.3 · 0.7% likely

   CWE-918

3. chshcms mccms Gf.php index server-side request forgeryCVE-2025-5327chshcms · CVSS 6.3 · 0.6% likely

   CWE-918

4. MCCMS v2.7.0 has an SSRF vulnerability located in the index() method of the sys\apps\controllers\api\Gf.php file, where the pic parameter is processed. The pic parameter is decryp…CVE-2025-50234Chshcms · CVSS 6.5 · 0.3% likely

   CWE-918

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.