CVE-2019-10707

MKCMS V5.0 has SQL injection via the bplay.php play parameter...

CVE-2019-10707

MKCMS V5.0 has SQL injection via the bplay.php play parameter...

Sql injection

MKCMS V5.0 has SQL injection via the bplay.php play parameter...

CVE-2019-10707

MKCMS V5.0 is affected by a SQL injection vulnerability in the bplay.php play parameter. The root cause is inadequate validation of externally supplied SQL statements, per CNVD-2019-14075 and related entries, with Red Hat and CVE databases confirming the same issue. Impact is described as high/cr...

CVE-2019-10707

MKCMS V5.0 has SQL injection via the bplay.php play parameter...

PT-2019-11999

Name of the Vulnerable Software and Affected Versions MKCMS version 5.0 Description The issue is related to SQL injection, which occurs via the play parameter in the bplay.php file. Recommendations For MKCMS version 5.0, avoid using the play parameter in the bplay.php file until a patch is...

CVE-2019-10707: Improper Neutralization of Special Elements used in an SQL Command

MKCMS V5.0 has SQL injection via the bplay.php play parameter...