CVE-2022-23899

MCMS v5.2.5 was discovered to contain a SQL injection vulnerability via search.do in the file /web/MCmsAction.java...

PT-2022-16318

Name of the Vulnerable Software and Affected Versions MCMS version 5.2.5 Description A SQL injection issue was discovered in MCMS via the "search.do" endpoint in the file /web/MCmsAction.java. Recommendations For MCMS version 5.2.5, consider restricting access to the "search.do" endpoint until a...