CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

432 matches found

osv_ghsa•added 2022/02/18 12:00 a.m.•50 views

GHSA-2PMW-CVC7-FRVH SQL injection in MCMS

A problem was found in ming-soft MCMS v5.1. There is a sql injection vulnerability in /ms/cms/content/list.do...

9.8CVSS9.6AI score0.01412EPSS

SaveExploits1References2

osv_cve•added 2022/02/17 4:15 p.m.•20 views

CVE-2021-44868

A problem was found in ming-soft MCMS v5.1. There is a sql injection vulnerability in /ms/cms/content/list.do...

9.8CVSS7.3AI score0.01412EPSS

SaveExploits1References1

attackerkb•added 2022/02/17 4:15 p.m.•20 views

CVE-2021-44868

A problem was found in ming-soft MCMS v5.1. There is a sql injection vulnerability in /ms/cms/content/list.do...

9.8CVSS7.2AI score0.01412EPSS

SaveExploits1References2

Prion•added 2022/02/17 4:15 p.m.•27 views

Sql injection

A problem was found in ming-soft MCMS v5.1. There is a sql injection vulnerability in /ms/cms/content/list.do...

7.5CVSS9.5AI score0.01412EPSS

SaveExploits1References1Affected Software1

Mend•added 2022/02/17 3:44 p.m.•7 views

CVE-2021-44868

A problem was found in ming-soft MCMS v5.1. There is a sql injection vulnerability in /ms/cms/content/list.do...

9.8CVSS0.01412EPSS

SaveExploits1References2

CVE•added 2022/02/17 3:44 p.m.•123 views

CVE-2021-44868

The vulnerability CVE-2021-44868 affects Ming-soft MCMS v5.1. A SQL injection flaw exists in the /ms/cms/content/list.do endpoint, enabling potentially unauthorized access to backend data. Documented under CVSS metrics, the issue has a CVSS v3.1 base score of 9.8 (CRITICAL) with NETWORK attack ve...

9.8CVSS9.5AI score0.01412EPSS

SaveIn wildExploits1References1Affected Software1

Positive Technologies•added 2022/02/17 12:00 a.m.•2 views

PT-2022-12250

Name of the Vulnerable Software and Affected Versions ming-soft MCMS version 5.1 Description A problem was found in ming-soft MCMS, which has a sql injection vulnerability in the "/ms/cms/content/list.do" API endpoint. Recommendations For ming-soft MCMS version 5.1, consider restricting access to...

9.8CVSS0.01412EPSS

SaveExploits1References6

Rapid7 Vulnerability Database (full)•added 2022/02/17 12:00 a.m.•6 views

CVE-2021-44868: Improper Neutralization of Special Elements used in an SQL Command

A problem was found in ming-soft MCMS v5.1. There is a sql injection vulnerability in /ms/cms/content/list.do...

9.8CVSS8.1AI score0.01412EPSS

SaveExploits1References2

osv_ghsa•added 2022/02/09 10:18 p.m.•60 views

GHSA-H3HW-G4HM-7GR4 SQL injection without credentials in ming-soft MCMS

An issue was discovered in ming-soft MCMS v5.0, where a malicious user can exploit SQL injection without logging in through /mcms/view.do...

9.8CVSS9.8AI score0.01159EPSS

SaveExploits1References2

Github Security Blog•added 2022/02/09 10:18 p.m.•42 views

SQL injection without credentials in ming-soft MCMS

An issue was discovered in ming-soft MCMS v5.0, where a malicious user can exploit SQL injection without logging in through /mcms/view.do...

9.8CVSS9.7AI score0.01159EPSS

SaveExploits1References3Affected Software1

OpenVAS•added 2022/01/28 12:00 a.m.•20 views

Mageia: Security Advisory (MGASA-2017-0108)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.7AI score0.01248EPSS

SaveExploits0References3

OpenVAS•added 2022/01/28 12:00 a.m.•25 views

Mageia: Security Advisory (MGASA-2017-0070)

7.8CVSS6.7AI score0.02131EPSS

SaveExploits4References10

OpenVAS•added 2022/01/28 12:00 a.m.•26 views

Mageia: Security Advisory (MGASA-2018-0212)

8.8CVSS6.4AI score0.02489EPSS

SaveExploits7References3

Packet Storm•added 2021/07/28 12:00 a.m.•258 views

eGain Chat 15.5.5 Cross Site Scripting

Exploit Title: eGain Chat 15.5.5 Cross-Site Scripting Vendor Homepage: https://www.egain.com/ Software Link: https://www.egain.com/chat-software/ Exploit Authors: Brandon Ming Yang Ho https://www.linkedin.com/in/minhobrandon/, Hassy Vinod Eshan https://www.linkedin.com/in/hassy-vinod/ CVE:...

6.4AI score0.00912EPSS

SaveExploits3

Check Point Advisories•added 2021/02/07 12:00 a.m.•83 views

Ming-Soft MCMS SQL Injection (CVE-2020-23262)

An SQL injection vulnerability exists in Ming-Soft MCMS. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

7.5CVSS5.2AI score0.01159EPSS

SaveExploits1

osv_cve•added 2021/01/26 6:15 p.m.•17 views

CVE-2020-23262

An issue was discovered in ming-soft MCMS v5.0, where a malicious user can exploit SQL injection without logging in through /mcms/view.do...

9.8CVSS7.3AI score0.01159EPSS

SaveExploits1References1

CNNVD•added 2021/01/26 12:00 a.m.•19 views

Ming-soft Mcms SQL Injection Vulnerability

A SQL injection vulnerability exists in Ming-soft Mcms version 5.0. An attacker can exploit the SQL injection without logging in via /mcms/view.do...

9.8CVSS7.4AI score0.01159EPSS

SaveExploits1References2

Mend•added 2021/01/22 3:35 p.m.•7 views

CVE-2020-23262

An issue was discovered in ming-soft MCMS v5.0, where a malicious user can exploit SQL injection without logging in through /mcms/view.do...

9.8CVSS0.01159EPSS

SaveExploits1References2

Cvelist•added 2021/01/22 3:35 p.m.•45 views

CVE-2020-23262

An issue was discovered in ming-soft MCMS v5.0, where a malicious user can exploit SQL injection without logging in through /mcms/view.do...

9.9AI score0.01159EPSS

SaveExploits1References1

Rapid7 Vulnerability Database (full)•added 2021/01/22 12:00 a.m.•11 views

CVE-2020-23262: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in ming-soft MCMS v5.0, where a malicious user can exploit SQL injection without logging in through /mcms/view.do...

9.8CVSS5.8AI score0.01159EPSS

SaveExploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by