CVE-2020-22819

MKCMS V6.2 has SQL injection via the /ucenter/active.php verify parameter...

CVE-2020-22818

MKCMS V6.2 has SQL injection via /ucenter/reg.php name parameter...

CVE-2020-22819

MKCMS V6.2 has SQL injection via the /ucenter/active.php verify parameter...

CVE-2020-22820

MKCMS V6.2 has SQL injection via the /ucenter/repass.php name parameter...

CVE-2020-22819

CVE-2020-22819 affects MKCMS V6.2, with a SQL injection in the /ucenter/active.php endpoint via the verify parameter. Public documents consistently describe an SQLi vulnerability in MKCMS 6.2 hosted parameter, leading to high-impact confidentiality/integrity/availability (CVSS 3.1 base 9.8). Root...

CVE-2020-22818

MKCMS V6.2 contains a SQL injection vulnerability in the /ucenter/reg.php endpoint, exploitable via the name parameter. Affected software: MKCMS V6.2; vulnerability type: SQL injection; root cause: unsanitized input in the name parameter leading to database query manipulation. Potential impact pe...

CVE-2020-22820

MKCMS V6.2 is affected by an SQL injection vulnerability in the /ucenter/repass.php endpoint, exploitable via the name parameter. The CVSS vector indicates network access, no authentication, and high impact on confidentiality, integrity, and availability (score 9.8). Several connected sources cor...

CVE-2020-22819: Improper Neutralization of Special Elements used in an SQL Command

MKCMS V6.2 has SQL injection via the /ucenter/active.php verify parameter...

CVE-2020-22818: Improper Neutralization of Special Elements used in an SQL Command

MKCMS V6.2 has SQL injection via /ucenter/reg.php name parameter...

PT-2022-8650 · Mkcms · Mkcms

Name of the Vulnerable Software and Affected Versions: MKCMS version 6.2 Description: The issue is related to SQL injection via the "/ucenter/repass.php" API endpoint, specifically through the name parameter. This allows for potential exploitation. Recommendations: For MKCMS version 6.2, as a...

CVE-2020-22820: Improper Neutralization of Special Elements used in an SQL Command

MKCMS V6.2 has SQL injection via the /ucenter/repass.php name parameter...

MKCMS SQL注入漏洞

MKCMS is a content management system. A SQL injection vulnerability exists in MKCMS version V6.2, which originates from the name parameter of its /ucenter/reg.php component that allows an attacker to achieve SQL injection...

CVE-2020-22818

MKCMS V6.2 has SQL injection via /ucenter/reg.php name parameter...

PT-2022-8648 · Mkcms · Mkcms

Name of the Vulnerable Software and Affected Versions: MKCMS version 6.2 Description: The issue is related to SQL injection. It occurs via the /ucenter/reg.php API endpoint, specifically through the name parameter. Recommendations: For MKCMS version 6.2, as a temporary workaround, consider...

PT-2022-8649 · Mkcms · Mkcms

Name of the Vulnerable Software and Affected Versions: MKCMS version 6.2 Description: The issue is related to SQL injection. It occurs via the /ucenter/active.php endpoint, specifically through the verify parameter. Recommendations: For MKCMS version 6.2, as a temporary workaround, consider...

SQL Injection Vulnerability in MKCMS Official Version

MKCMS is a free and open source PHP web content management system developed by Yakun Technology. MKCMS official version of the existence of SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive information in the database...

MKCMS official version suffers from SQL injection vulnerability (CNVD-2021-16411)

MKCMS is a free and open source PHP web content management system developed by Yakun Technology. MKCMS official version of the existence of SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive information in the database...

MKCMS official version suffers from SQL injection vulnerability (CNVD-2021-16410)

MKCMS is a free and open source PHP web content management system developed by Yakun Technology. MKCMS official version of the existence of SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive information in the database...

MKCMS official version suffers from SQL injection vulnerability (CNVD-2021-16408)

MKCMS is a free and open source PHP web content management system developed by Yakun Technology. MKCMS official version of the existence of SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive information in the database...

MKCMS official version suffers from SQL injection vulnerability (CNVD-2021-16407)

MKCMS is a free and open source PHP web content management system developed by Yakun Technology. MKCMS official version of the existence of SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive information in the database...