234 matches found
CVE-2022-36599
Mingsoft MCMS 5.2.8 was discovered to contain a SQL injection vulnerability in /mdiy/model/delete URI via models Lists...
CVE-2022-36599
Affected software: Mingsoft MCMS 5.2.8. Vulnerability: SQL injection in the /mdiy/model/delete URI via models Lists. Root cause / impact: Not explicitly detailed beyond the SQLi vulnerability; CVSS suggests CRITICAL impact (C/H, I/H, A/H) with network access. Exploitation status: Not provided in ...
CVE-2022-36272
Mingsoft MCMS 5.2.8 was discovered to contain a SQL injection vulnerability in /mdiy/page/verify URI via fieldName parameter...
CVE-2022-36272
Summary of CVE-2022-36272 (Mingsoft MCMS 5.2.8) : A SQL injection vulnerability is present in the /mdiy/page/verify URI via the fieldName parameter in Mingsoft MCMS 5.2.8. Public sources describe impact as arbitrary SQL execution due to improper handling of the validated function in PageAction.ja...
PT-2022-23495 · Mingsoft · Mingsoft Mcms
Name of the Vulnerable Software and Affected Versions: Mingsoft MCMS version 5.2.8 Description: A SQL injection issue was found in the /mdiy/model/delete URI via models Lists. This could potentially allow for unauthorized access to database information. Recommendations: For Mingsoft MCMS version...
MingSoft MCMS SQL注入漏洞
MingSoft MCMS is a complete open source J2ee system from China's MingSoft. A SQL injection vulnerability exists in MingSoft MCMS version 5.2.8, which originates from a SQL injection vulnerability in the /mdiy/model/delete URI containing a SQL injection via models Lists...
MingSoft MCMS SQL注入漏洞
MingSoft MCMS is a complete open source J2ee system from China's MingSoft. A SQL injection vulnerability exists in MingSoft MCMS version 5.2.8, which originates from an attacker being able to exploit the fieldName parameter of its /mdiy/page/verify URI component to achieve SQL injection...
PT-2022-23287 · Mingsoft · Mingsoft Mcms
Name of the Vulnerable Software and Affected Versions: Mingsoft MCMS version 5.2.8 Description: A SQL injection issue was found in the /mdiy/page/verify URI via the fieldName parameter. This allows for potential exploitation. Recommendations: For Mingsoft MCMS version 5.2.8, avoid using the...
File upload vulnerability in mcms of Jiangxi Minsoft Technology Co. Ltd (CNVD-2022-62422)
mcms is a complete open source CMS. Jiangxi Mingsoft Technology Co. mcms file upload vulnerability, an attacker can use the vulnerability to obtain control of the server...
MingSoft MCMS 代码问题漏洞
MingSoft MCMS is a complete open source J2ee system from China's MingSoft. A security vulnerability exists in MingSoft MCMS v5.2.8, which contains an arbitrary file upload vulnerability...
MingSoft MCMS Cross-site Request Forgery Vulnerability
MingSoft MCMS is a J2ee system from MingSoft, a Chinese company. MingSoft MCMS version 5.2.7 is vulnerable to cross-site request forgery. An attacker can use this vulnerability to add an administrator account via ms/basic/manager/save.do...
GHSA-GP39-QJ5F-43QV Cross Site Request Forgery in Mingsoft MCMS
An issue was discovered in MCMS 5.2.7. There is a CSRF vulnerability that can add an administrator account via ms/basic/manager/save.do...
Cross Site Request Forgery in Mingsoft MCMS
An issue was discovered in MCMS 5.2.7. There is a CSRF vulnerability that can add an administrator account via ms/basic/manager/save.do...
MingSoft MCMS 跨站请求伪造漏洞
MingSoft MCMS is a J2ee system from MingSoft, a Chinese company. MingSoft MCMS version 5.2.7 is vulnerable to cross-site request forgery. An attacker can use this vulnerability to add an administrator account via ms/basic/manager/save.do...
MingSoft MCMS 代码问题漏洞
MCMS is a java-based development of a lightweight open source content management system . Jiangxi Mingsoft Technology Co., Ltd MCMS file upload vulnerability, an attacker can use the vulnerability to obtain control of the server...
Mingsoft MCMS CSRF vulnerability
An issue was discovered in MCMS 4.6.5. There is a CSRF vulnerability that can add an administrator account via ms/basic/manager/save.do...
GHSA-M246-PV28-4R6F Mingsoft MCMS CSRF vulnerability
An issue was discovered in MCMS 4.6.5. There is a CSRF vulnerability that can add an administrator account via ms/basic/manager/save.do...
MingSoft MCMS SQL Injection Vulnerability (CNVD-2022-72199)
MingSoft MCMS is a J2ee system from MingSoft, a Chinese company. SQL injection vulnerability exists in Mingsoft MCMS version 5.2.7, which can be exploited by attackers to conduct SQL injection attacks in the /mdiy/dict/list URI via the orderBy parameter...
MingSoft MCMS SQL Injection Vulnerability (CNVD-2022-72200)
MingSoft MCMS is a J2ee system from MingSoft, a Chinese company. version 5.2.7 of Mingsoft MCMS is vulnerable to SQL injection, which can be exploited by attackers to conduct SQL injection attacks in /mdiy/dict/listExcludeApp URI via the orderBy parameter...
