Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-10708
HistoryJan 24, 2022 - 12:00 a.m.

MingSoft Mcms has an unspecified vulnerability

2022-01-2400:00:00
China National Vulnerability Database
www.cnvd.org.cn
8
mingsoft mcms
j2ee
security vulnerability
user-submitted data
template management
arbitrary code
cnvd

EPSS

0.009

Percentile

83.3%

MingSoft Mcms is a complete open source J2ee system from MingSoft, China. v5.2.4 of MingSoft Mcms contains a security vulnerability that stems from the lack of effective filtering of user-submitted data in the software’s template management function, which could be exploited by attackers to execute arbitrary code via a carefully designed payload.

EPSS

0.009

Percentile

83.3%