EUVD-2026-54923

A vulnerability was determined in MingSoft MCMS up to 3.0.6. This affects the function ModelDataImpl.queryDiyFormData of the file /mdiy/form/data/list.do of the component ms-mdiy. Executing a manipulation of the argument formFields can lead to sql injection. The attack may be performed from remot...

PT-2026-69296

Name of the Vulnerable Software and Affected Versions MingSoft MCMS versions prior to 3.0.7 Description A remote SQL injection exists within the ms-mdiy component. The issue occurs in the ModelDataImpl.queryDiyFormData function located at the '/mdiy/form/data/list.do' endpoint. An attacker can...

CVE-2026-19355: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in MingSoft MCMS up to 3.0.6. This affects the function ModelDataImpl.queryDiyFormData of the file /mdiy/form/data/list.do of the component ms-mdiy. Executing a manipulation of the argument formFields can lead to sql injection. The attack may be performed from remot...