Sql injection

MCMS v5.2.4 was discovered to contain a SQL injection vulnerability via /ms/mdiy/model/importJson.do...

CVE-2022-23314

MCMS v5.2.4 was discovered to contain a SQL injection vulnerability via /ms/mdiy/model/importJson.do...

PT-2022-15921

Name of the Vulnerable Software and Affected Versions MCMS version 5.2.4 Description A SQL injection issue was discovered in MCMS. The issue is related to the /ms/mdiy/model/importJson.do API endpoint. Recommendations For MCMS version 5.2.4, as a temporary workaround, consider restricting access ...