4 matches found
EUVD-2023-1327
Malicious code in bioql PyPI...
9.8CVSS9.2AI score0.01423EPSS
SaveExploits1References3
SQL Injection
net.mingsoft, ms-mcms is vulnerable to SQL Injection. The vulnerability exists because the library does not properly validate the query strings in the basictitle parameter , allowing an attacker to inject and execute malicious SQL queries...
9.8CVSS9.4AI score0.01423EPSS
SaveExploits1References2Affected Software1
CVE-2020-20913
SQL Injection vulnerability found in Ming-Soft MCMS v.4.7.2 allows a remote attacker to execute arbitrary code via basictitle parameter...
9.8AI score0.01423EPSS
SaveExploits1References1
CVE-2020-20913: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability found in Ming-Soft MCMS v.4.7.2 allows a remote attacker to execute arbitrary code via basictitle parameter...
9.8CVSS6.5AI score0.01423EPSS
SaveExploits1References3
20