MingSoft MCMS SQL Injection Vulnerability (CNVD-2022-72200)

MingSoft MCMS is a J2ee system from MingSoft, a Chinese company. version 5.2.7 of Mingsoft MCMS is vulnerable to SQL injection, which can be exploited by attackers to conduct SQL injection attacks in /mdiy/dict/listExcludeApp URI via the orderBy parameter...

MingSoft MCMS SQL Injection Vulnerability (CNVD-2022-72199)

MingSoft MCMS is a J2ee system from MingSoft, a Chinese company. SQL injection vulnerability exists in Mingsoft MCMS version 5.2.7, which can be exploited by attackers to conduct SQL injection attacks in the /mdiy/dict/list URI via the orderBy parameter...

CVE-2022-30048

Mingsoft MCMS 5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/list URI via orderBy parameter...

CVE-2022-30047

Mingsoft MCMS v5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/listExcludeApp URI via orderBy parameter...

CVE-2022-30047

Mingsoft MCMS v5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/listExcludeApp URI via orderBy parameter...

CVE-2022-30048

Mingsoft MCMS 5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/list URI via orderBy parameter...

CVE-2022-30047

Mingsoft MCMS v5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/listExcludeApp URI via orderBy parameter...

CVE-2022-30048

Mingsoft MCMS 5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/list URI via orderBy parameter...

Sql injection

Mingsoft MCMS 5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/list URI via orderBy parameter...

Sql injection

Mingsoft MCMS v5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/listExcludeApp URI via orderBy parameter...

CVE-2022-30048

Mingsoft MCMS 5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/list URI via orderBy parameter...

CVE-2022-30048

CVE-2022-30048 affects Mingsoft MCMS 5.2.7 and is a SQL injection vulnerability in the /mdiy/dict/list endpoint exploited through the orderBy parameter. Root cause: unvalidated input leading to SQL injection; impact includes potential data exposure or modification as indicated by CVSS metrics (CV...

CVE-2022-30047

Mingsoft MCMS v5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/listExcludeApp URI via orderBy parameter...

CVE-2022-30047

MingSoft MCMS version 5.2.7 is vulnerable to a SQL injection vulnerability. An attacker can exploit this flaw in the /mdiy/dict/listExcludeApp URI by providing malicious input through the orderBy parameter. This is a J2ee system where the lack of proper neutralization of special elements in SQL c...

MingSoft MCMS SQL注入漏洞

MingSoft MCMS is a J2ee system from MingSoft, a Chinese company. version 5.2.7 of Mingsoft MCMS is vulnerable to SQL injection, which can be exploited by attackers to conduct SQL injection attacks in /mdiy/dict/listExcludeApp URI via the orderBy parameter...

PT-2022-19983

Name of the Vulnerable Software and Affected Versions Mingsoft MCMS version 5.2.7 Description A SQL injection issue was found in the /mdiy/dict/listExcludeApp URI via the orderBy parameter. This allows for potential exploitation. Recommendations For Mingsoft MCMS version 5.2.7, avoid using the...

CVE-2022-30048: Improper Neutralization of Special Elements used in an SQL Command

Mingsoft MCMS 5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/list URI via orderBy parameter...

CVE-2022-30047: Improper Neutralization of Special Elements used in an SQL Command

Mingsoft MCMS v5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/listExcludeApp URI via orderBy parameter...

PT-2022-19984

Name of the Vulnerable Software and Affected Versions Mingsoft MCMS version 5.2.7 Description A SQL injection issue was found in the /mdiy/dict/list URI via the orderBy parameter. This allows for potential exploitation. No information is provided about the estimated number of affected devices or...

MingSoft MCMS SQL注入漏洞

MingSoft MCMS is a J2ee system from MingSoft, a Chinese company. SQL injection vulnerability exists in Mingsoft MCMS version 5.2.7, which can be exploited by attackers to conduct SQL injection attacks in the /mdiy/dict/list URI via the orderBy parameter...