SQL Injection

net.mingsoft, ms-mcms is vulnerable to SQL Injection. The vulnerability is due to improper input sanitization in the search.do endpoint within the /web/MCmsAction.java file, which allows an attacker to inject malicious SQL queries and manipulate or access unauthorized database information...