CVE-2020-22820

MKCMS V6.2 has SQL injection via the /ucenter/repass.php name parameter...

CVE-2020-22820

MKCMS V6.2 is affected by an SQL injection vulnerability in the /ucenter/repass.php endpoint, exploitable via the name parameter. The CVSS vector indicates network access, no authentication, and high impact on confidentiality, integrity, and availability (score 9.8). Several connected sources cor...