CVE-2019-10707

MKCMS V5.0 is affected by a SQL injection vulnerability in the bplay.php play parameter. The root cause is inadequate validation of externally supplied SQL statements, per CNVD-2019-14075 and related entries, with Red Hat and CVE databases confirming the same issue. Impact is described as high/cr...