Mingsoft MCMS SQL injection vulnerability

🗓️ 27 Jan 2022 00:52:00Reported by GitHub Advisory DatabaseType

Mingsoft MCMS SQL injection in /querydata endpoin

Reporter	Title	Published	Views	Family All 6
Prion	Sql injection	26 Jan 202219:15	–	prion
Cvelist	CVE-2021-46385	26 Jan 202218:35	–	cvelist
CVE	CVE-2021-46385	26 Jan 202219:15	–	cve
CNVD	mingSoft MCMS SQL Injection Vulnerability (CNVD-2022-09255)	28 Jan 202200:00	–	cnvd
OSV	Mingsoft MCMS SQL injection vulnerability	27 Jan 202200:00	–	osv
NVD	CVE-2021-46385	26 Jan 202219:15	–	nvd

Vulners

Node

net.mingsoft ms\-mcmsRange≤5.2.5

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-46385
gitee	www.gitee.com/mingSoft/MCMS/issues/I4QZ1K
github	www.github.com/ming-soft/MCMS/issues/99
github	www.github.com/advisories/GHSA-phwq-9gc4-q5c8

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

27 Jan 2022 00:00Current

8.1High risk

Vulners AI Score8.1

CVSS25

CVSS37.5

EPSS0.00418

CWE-89