CVE-2025-56316

A SQL injection vulnerability in the contenttitle parameter of the /cms/content/list endpoint in MCMS 5.5.0 allows remote attackers to execute arbitrary SQL queries via unsanitized input in the FreeMarker template rendering...

SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection via unsanitized input in the contenttitle parameter of the /cms/content/list endpoint during FreeMarker template rendering. An attacker can execute arbitrary SQL queries by supplying crafted input. Remediation Upgrade...

CVE-2025-56316

The MCMS content management system (versions 5.5.0 through 6.0.1 ) is vulnerable to a SQL injection vulnerability (CWE-89). The root cause is the improper sanitization of the content_title parameter within the /cms/content/list endpoint during FreeMarker template rendering . This flaw allows remo...

CVE-2025-56316: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in the contenttitle parameter of the /cms/content/list endpoint in MCMS 5.5.0 allows remote attackers to execute arbitrary SQL queries via unsanitized input in the FreeMarker template rendering...

PT-2025-42633

Name of the Vulnerable Software and Affected Versions MCMS version 5.5.0 Description A SQL injection issue exists in MCMS. The issue is due to unsanitized input within the FreeMarker template rendering, specifically affecting the content title parameter of the /cms/content/list API endpoint. This...

GHSA-MX3X-RMRH-9WF6 SQL injection in net.mingsoft:ms-mcms

Mingsoft MCMS v5.2.7 was discovered to contain a SQL injection vulnerability via /cms/content/list...

CVE-2022-26585

Mingsoft MCMS v5.2.7 was discovered to contain a SQL injection vulnerability via /cms/content/list...

CVE-2022-26585

Mingsoft MCMS v5.2.7 was discovered to contain a SQL injection vulnerability via /cms/content/list...

CVE-2022-26585

Mingsoft MCMS v5.2.7 was discovered to contain a SQL injection vulnerability via /cms/content/list...