Lucene search
China National Vulnerability DatabaseCNVD-2022-18535HistoryMar 04, 2022 - 12:00 a.m.
MingSoft Mcms SQL Injection Vulnerability (CNVD-2022-18535)
2022-03-0400:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
mingsoft
mcms
sql injection
vulnerability
china
j2ee
search parameter
mdyc
dict
excludeapp
cnvd-2022-18535
EPSS
0.016
Percentile
87.5%
MingSoft Mcms is a complete open source J2ee system from MingSoft (China). a security vulnerability exists in MingSoft Mcms v5.2.4, which allows attackers to perform SQL injection attacks via the search.do parameter in the file /mdiy/dict/listExcludeApp. No details of the vulnerability are currently available.
Related
cve
cve
CVE-2022-25125
2022-03-03 19:15:08
nvd
nvd
CVE-2022-25125
2022-03-03 19:15:08
prion
prion
Sql injection
2022-03-03 19:15:00
cvelist
cvelist
CVE-2022-25125
2022-03-03 18:01:35
nuclei
nuclei
MCMS 5.2.4 - SQL Injection
2023-03-31 13:50:12