CVE-2022-36272

Summary of CVE-2022-36272 (Mingsoft MCMS 5.2.8) : A SQL injection vulnerability is present in the /mdiy/page/verify URI via the fieldName parameter in Mingsoft MCMS 5.2.8. Public sources describe impact as arbitrary SQL execution due to improper handling of the validated function in PageAction.ja...