EUVD-2026-54923

A vulnerability was determined in MingSoft MCMS up to 3.0.6. This affects the function ModelDataImpl.queryDiyFormData of the file /mdiy/form/data/list.do of the component ms-mdiy. Executing a manipulation of the argument formFields can lead to sql injection. The attack may be performed from remot...

PT-2026-69296

Name of the Vulnerable Software and Affected Versions MingSoft MCMS versions prior to 3.0.7 Description A remote SQL injection exists within the ms-mdiy component. The issue occurs in the ModelDataImpl.queryDiyFormData function located at the '/mdiy/form/data/list.do' endpoint. An attacker can...

silverstripe/framework ReadOnly transformation for formfields exploitable

Form fields returning isReadonly as true are vulnerable to reflected XSS injections. This includes ReadonlyField, LookupField, HTMLReadonlyField, as well as special purpose fields like TimeFieldReadonly. Values submitted to through these form fields are not filtered out from the form session data...

SS-2016-010: ReadOnly transformation for formfields exploitable

More info at https://www.silverstripe.org/download/security-releases/ss-2016-010/...

AdMan 1.1.20070907 - campaignId SQL Injection

AdMan 1.1.20070907 - campaignId SQL Injection Remote SQL Injection SuB-ZeRo SuB-ZeRo my best freinds :: x.CJP.X & ach2008 & carlos the jackel & HiSoK4 all muslims milw0rm.com 2008-10-08...

AdMan 1.1.20070907 (campaignId) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =========================================================== AdMan 1.1.20070907 campaignId SQL Injection Vulnerability =========================================================== Remote SQL Injection SuB-ZeRo author : SuB-ZeRoalgeria hacker...