541 matches found
Unrestricted Upload of File with Dangerous Type in MCMS
MCMS v5.2.8 was discovered to contain an arbitrary file upload vulnerability...
CVE-2022-31943
MCMS v5.2.8 was discovered to contain an arbitrary file upload vulnerability...
CVE-2022-31943
MCMS v5.2.8 was discovered to contain an arbitrary file upload vulnerability...
Privilege escalation
MCMS v5.2.8 was discovered to contain an arbitrary file upload vulnerability...
CVE-2022-31943
MCMS v5.2.8 was discovered to contain an arbitrary file upload vulnerability...
CVE-2022-31943
CVE-2022-31943 affects MCMS v5.2.8 and is a validated arbitrary file upload vulnerability. Red Hat’s RH:CVE entry corroborates the issue; NVD metrics rate it as Critical (CVSSv3.1 9.8) with network access and no user interaction required. The initial data confirms the affected product and vulnera...
PT-2022-20990 · Mcms · Mcms
Name of the Vulnerable Software and Affected Versions: MCMS version 5.2.8 Description: The issue is related to an arbitrary file upload vulnerability. This means that an attacker could potentially upload malicious files to the system, which could lead to various security problems. Recommendations...
MingSoft MCMS 代码问题漏洞
MingSoft MCMS is a complete open source J2ee system from China's MingSoft. A security vulnerability exists in MingSoft MCMS v5.2.8, which contains an arbitrary file upload vulnerability...
MingSoft MCMS Cross-site Request Forgery Vulnerability
MingSoft MCMS is a J2ee system from MingSoft, a Chinese company. MingSoft MCMS version 5.2.7 is vulnerable to cross-site request forgery. An attacker can use this vulnerability to add an administrator account via ms/basic/manager/save.do...
File upload vulnerability in MCMS of Jiangxi Minsoft Technology Co. Ltd (CNVD-2022-44353)
MCMS is a java-based development of a lightweight open source content management system . Jiangxi Mingsoft Technology Co., Ltd MCMS file upload vulnerability, an attacker can use the vulnerability to obtain control of the server...
GHSA-6XJ9-HPQ3-W3QW Code injection in MCMS
An arbitrary file upload vulnerability was discovered in MCMS 5.2.7, allowing an attacker to execute arbitrary code through a crafted ZIP file...
Code injection in MCMS
An arbitrary file upload vulnerability was discovered in MCMS 5.2.7, allowing an attacker to execute arbitrary code through a crafted ZIP file...
GHSA-GP39-QJ5F-43QV Cross Site Request Forgery in Mingsoft MCMS
An issue was discovered in MCMS 5.2.7. There is a CSRF vulnerability that can add an administrator account via ms/basic/manager/save.do...
Cross Site Request Forgery in Mingsoft MCMS
An issue was discovered in MCMS 5.2.7. There is a CSRF vulnerability that can add an administrator account via ms/basic/manager/save.do...
CVE-2022-30506
An arbitrary file upload vulnerability was discovered in MCMS 5.2.7, allowing an attacker to execute arbitrary code through a crafted ZIP file...
CVE-2022-30506
An arbitrary file upload vulnerability was discovered in MCMS 5.2.7, allowing an attacker to execute arbitrary code through a crafted ZIP file...
CVE-2022-30506
An arbitrary file upload vulnerability was discovered in MCMS 5.2.7, allowing an attacker to execute arbitrary code through a crafted ZIP file...
CVE-2022-29647
An issue was discovered in MCMS 5.2.7. There is a CSRF vulnerability that can add an administrator account via ms/basic/manager/save.do...