CVE-2025-2193

A vulnerability has been found in MRCMS 3.1.2 and classified as critical. This vulnerability affects the function delete of the file /admin/file/delete.do of the component org.marker.mushroom.controller.FileController. The manipulation of the argument path/name leads to path traversal. The attack...

CVE-2025-2193: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability has been found in MRCMS 3.1.2 and classified as critical. This vulnerability affects the function delete of the file /admin/file/delete.do of the component org.marker.mushroom.controller.FileController. The manipulation of the argument path/name leads to path traversal. The attack...

PT-2024-33011

Name of the Vulnerable Software and Affected Versions MRCMS version 3.1.2 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the RID parameter in the "/admin/article/delete.do" API endpoint. Recommendations For MRCMS version 3.1.2, avoid usi...

CVE-2024-48177

MRCMS 3.1.2 contains a SQL injection vulnerability via the RID parameter in /admin/article/delete.do...

CVE-2024-48177: Improper Neutralization of Special Elements used in an SQL Command

MRCMS 3.1.2 contains a SQL injection vulnerability via the RID parameter in /admin/article/delete.do...