CVE-2022-30047

Mingsoft MCMS v5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/listExcludeApp URI via orderBy parameter...

CVE-2022-30047

MingSoft MCMS version 5.2.7 is vulnerable to a SQL injection vulnerability. An attacker can exploit this flaw in the /mdiy/dict/listExcludeApp URI by providing malicious input through the orderBy parameter. This is a J2ee system where the lack of proper neutralization of special elements in SQL c...