CVE-2019-10707

MKCMS V5.0 has SQL injection via the bplay.php play parameter...

CVE-2019-10707

MKCMS V5.0 has SQL injection via the bplay.php play parameter...

CVE-2019-10707

MKCMS V5.0 is affected by a SQL injection vulnerability in the bplay.php play parameter. The root cause is inadequate validation of externally supplied SQL statements, per CNVD-2019-14075 and related entries, with Red Hat and CVE databases confirming the same issue. Impact is described as high/cr...

PT-2019-11999

Name of the Vulnerable Software and Affected Versions MKCMS version 5.0 Description The issue is related to SQL injection, which occurs via the play parameter in the bplay.php file. Recommendations For MKCMS version 5.0, avoid using the play parameter in the bplay.php file until a patch is...

CVE-2019-10707: Improper Neutralization of Special Elements used in an SQL Command

MKCMS V5.0 has SQL injection via the bplay.php play parameter...

SQL Injection Vulnerability in MKCMS Version 5.0 ac***.php Page

MKCMS is a content management system. A SQL injection vulnerability exists in the ac.php page of MKCMS version 5.0, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in MKCMS vl***.php Page

MKCMS is a content management system. A SQL injection vulnerability exists in the MKCMS vl.php page, which can be exploited by attackers to obtain sensitive information from the database...

mkCMS - index.php Arbitrary PHP Code Execution

mkCMS - index.php Arbitrary PHP Code Execution source: https://www.securityfocus.com/bid/60488/info mkCMS is prone to an arbitrary PHP code-execution vulnerability. An attacker can exploit this issue to execute arbitrary PHP code within the context of the affected application. mkCMS 3.6 is...

mkCMS - 'index.php' Arbitrary PHP Code Execution

source: https://www.securityfocus.com/bid/60488/info mkCMS is prone to an arbitrary PHP code-execution vulnerability. An attacker can exploit this issue to execute arbitrary PHP code within the context of the affected application. mkCMS 3.6 is vulnerable; other versions may also be affected...