Lucene search
+L

245 matches found

Github Security Blog
Github Security Blog
added 2022/08/17 12:0 a.m.37 views

Mingsoft MCMS SQL injection vulnerability in /mdiy/model/delete URI via models List

Mingsoft MCMS 5.2.8 was discovered to contain a SQL injection vulnerability in /mdiy/model/delete URI via models Lists...

9.8CVSS9.8AI score0.01065EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2022/08/17 12:0 a.m.73 views

GHSA-W3RC-2WHG-W934 Mingsoft MCMS SQL injection vulnerability in /mdiy/model/delete URI via models List

Mingsoft MCMS 5.2.8 was discovered to contain a SQL injection vulnerability in /mdiy/model/delete URI via models Lists...

9.8CVSS9.8AI score0.01065EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
added 2022/08/17 12:0 a.m.40 views

Mingsoft MCMS SQL injection vulnerability in /mdiy/page/verify URI via fieldName parameter

Mingsoft MCMS 5.2.8 was discovered to contain a SQL injection vulnerability in /mdiy/page/verify URI via fieldName parameter...

9.8CVSS9.8AI score0.01065EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2022/08/17 12:0 a.m.22 views

GHSA-HMJ3-MQGW-2FQ6 Mingsoft MCMS SQL injection vulnerability in /mdiy/page/verify URI via fieldName parameter

Mingsoft MCMS 5.2.8 was discovered to contain a SQL injection vulnerability in /mdiy/page/verify URI via fieldName parameter...

9.8CVSS9.8AI score0.01065EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/08/16 1:15 p.m.8 views

CVE-2022-36599

Mingsoft MCMS 5.2.8 was discovered to contain a SQL injection vulnerability in /mdiy/model/delete URI via models Lists...

9.8CVSS7.4AI score0.01065EPSS
SaveExploits1References2
OSV
OSV
added 2022/08/16 1:15 p.m.9 views

CVE-2022-36272

Mingsoft MCMS 5.2.8 was discovered to contain a SQL injection vulnerability in /mdiy/page/verify URI via fieldName parameter...

9.8CVSS5.8AI score0.01065EPSS
SaveExploits1References1
NVD
NVD
added 2022/08/16 1:15 p.m.30 views

CVE-2022-36272

Mingsoft MCMS 5.2.8 was discovered to contain a SQL injection vulnerability in /mdiy/page/verify URI via fieldName parameter...

9.8CVSS0.01065EPSS
SaveExploits1References1
NVD
NVD
added 2022/08/16 1:15 p.m.32 views

CVE-2022-36599

Mingsoft MCMS 5.2.8 was discovered to contain a SQL injection vulnerability in /mdiy/model/delete URI via models Lists...

9.8CVSS0.01065EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/08/16 1:15 p.m.5 views

CVE-2022-36272

Mingsoft MCMS 5.2.8 was discovered to contain a SQL injection vulnerability in /mdiy/page/verify URI via fieldName parameter...

9.8CVSS7.4AI score0.01065EPSS
SaveExploits1References2
OSV
OSV
added 2022/08/16 1:15 p.m.12 views

CVE-2022-36599

Mingsoft MCMS 5.2.8 was discovered to contain a SQL injection vulnerability in /mdiy/model/delete URI via models Lists...

9.8CVSS5.8AI score0.01065EPSS
SaveExploits1References1
Prion
Prion
added 2022/08/16 1:15 p.m.22 views

Sql injection

Mingsoft MCMS 5.2.8 was discovered to contain a SQL injection vulnerability in /mdiy/page/verify URI via fieldName parameter...

7.5CVSS9.7AI score0.01065EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2022/08/16 1:15 p.m.32 views

Sql injection

Mingsoft MCMS 5.2.8 was discovered to contain a SQL injection vulnerability in /mdiy/model/delete URI via models Lists...

7.5CVSS9.7AI score0.01065EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/08/16 12:51 p.m.52 views

CVE-2022-36599

Mingsoft MCMS 5.2.8 was discovered to contain a SQL injection vulnerability in /mdiy/model/delete URI via models Lists...

10AI score0.01065EPSS
SaveExploits1References1
CVE
CVE
added 2022/08/16 12:51 p.m.109 views

CVE-2022-36599

Affected software: Mingsoft MCMS 5.2.8. Vulnerability: SQL injection in the /mdiy/model/delete URI via models Lists. Root cause / impact: Not explicitly detailed beyond the SQLi vulnerability; CVSS suggests CRITICAL impact (C/H, I/H, A/H) with network access. Exploitation status: Not provided in ...

9.8CVSS9.8AI score0.01065EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/08/16 12:49 p.m.43 views

CVE-2022-36272

Mingsoft MCMS 5.2.8 was discovered to contain a SQL injection vulnerability in /mdiy/page/verify URI via fieldName parameter...

10AI score0.01065EPSS
SaveExploits1References1
CVE
CVE
added 2022/08/16 12:49 p.m.108 views

CVE-2022-36272

Summary of CVE-2022-36272 (Mingsoft MCMS 5.2.8) : A SQL injection vulnerability is present in the /mdiy/page/verify URI via the fieldName parameter in Mingsoft MCMS 5.2.8. Public sources describe impact as arbitrary SQL execution due to improper handling of the validated function in PageAction.ja...

9.8CVSS9.8AI score0.01065EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2022/08/16 12:0 a.m.11 views

MingSoft MCMS SQL注入漏洞

MingSoft MCMS is a complete open source J2ee system from China's MingSoft. A SQL injection vulnerability exists in MingSoft MCMS version 5.2.8, which originates from a SQL injection vulnerability in the /mdiy/model/delete URI containing a SQL injection via models Lists...

9.8CVSS8.6AI score0.01065EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2022/08/16 12:0 a.m.12 views

PT-2022-23287 · Mingsoft · Mingsoft Mcms

Name of the Vulnerable Software and Affected Versions: Mingsoft MCMS version 5.2.8 Description: A SQL injection issue was found in the /mdiy/page/verify URI via the fieldName parameter. This allows for potential exploitation. Recommendations: For Mingsoft MCMS version 5.2.8, avoid using the...

9.8CVSS9.5AI score0.01065EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2022/08/16 12:0 a.m.9 views

MingSoft MCMS SQL注入漏洞

MingSoft MCMS is a complete open source J2ee system from China's MingSoft. A SQL injection vulnerability exists in MingSoft MCMS version 5.2.8, which originates from an attacker being able to exploit the fieldName parameter of its /mdiy/page/verify URI component to achieve SQL injection...

9.8CVSS8.5AI score0.01065EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2022/08/16 12:0 a.m.10 views

PT-2022-23495 · Mingsoft · Mingsoft Mcms

Name of the Vulnerable Software and Affected Versions: Mingsoft MCMS version 5.2.8 Description: A SQL injection issue was found in the /mdiy/model/delete URI via models Lists. This could potentially allow for unauthorized access to database information. Recommendations: For Mingsoft MCMS version...

9.8CVSS9.5AI score0.01065EPSS
SaveExploits1References5
Rows per page
Query Builder