Atom.CMS SQL Injection Vulnerability (CNVD-2022-30776)

CMS is a content management system from The Digital Craft individual developers in the U.S. A SQL injection vulnerability exists in Atom.CMS version 2.0, which stems from a lack of validation of external input SQL statements in Atom.CMSadminuploads.php, which could be exploited to execute illegal...

GHSA-MX3X-RMRH-9WF6 SQL injection in net.mingsoft:ms-mcms

Mingsoft MCMS v5.2.7 was discovered to contain a SQL injection vulnerability via /cms/content/list...

CVE-2022-26585

Mingsoft MCMS v5.2.7 was discovered to contain a SQL injection vulnerability via /cms/content/list...

CVE-2022-26585

Mingsoft MCMS v5.2.7 was discovered to contain a SQL injection vulnerability via /cms/content/list...

CVE-2022-26585

Mingsoft MCMS v5.2.7 was discovered to contain a SQL injection vulnerability via /cms/content/list...

CVE-2022-26585: Improper Neutralization of Special Elements used in an SQL Command

Mingsoft MCMS v5.2.7 was discovered to contain a SQL injection vulnerability via /cms/content/list...

Sql injection

A problem was found in ming-soft MCMS v5.1. There is a sql injection vulnerability in /ms/cms/content/list.do...

CVE-2021-44868

A problem was found in ming-soft MCMS v5.1. There is a sql injection vulnerability in /ms/cms/content/list.do...

CVE-2021-44868: Improper Neutralization of Special Elements used in an SQL Command

A problem was found in ming-soft MCMS v5.1. There is a sql injection vulnerability in /ms/cms/content/list.do...

PT-2022-12250

Name of the Vulnerable Software and Affected Versions ming-soft MCMS version 5.1 Description A problem was found in ming-soft MCMS, which has a sql injection vulnerability in the "/ms/cms/content/list.do" API endpoint. Recommendations For ming-soft MCMS version 5.1, consider restricting access to...

PT-2021-10825

Name of the Vulnerable Software and Affected Versions Fork CMS Content Management System version 5.8.0 Description A cross-site scripting XSS issue was found in the Displayname field when using the Add, Edit, or Register functions. This allows attackers to execute arbitrary web scripts or HTML...

couponPHP CMS 1.0跨站脚本漏洞

couponPHP是优惠劵和交易网站的内容管理系统。 couponPHP CMS 1.0版本没有正确过滤 /admin/ajax/commentspaginate.php 或 /admin/ajax/storespaginate.php的 "sEcho" GET 参数值，在实现上存在多个跨站脚本漏洞，可导致在用户浏览器会话中执行任意HTML和脚本代码。 0 couponPHP couponPHP 1.0 厂商补丁： couponPHP --------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.couponphp.com...