540 matches found
MingSoft MCMS SQL注入漏洞
MingSoft MCMS is a J2ee system from MingSoft, a Chinese company. version 5.2.7 of Mingsoft MCMS is vulnerable to SQL injection, which can be exploited by attackers to conduct SQL injection attacks in /mdiy/dict/listExcludeApp URI via the orderBy parameter...
CVE-2022-27466
MCMS v5.2.27 was discovered to contain a SQL injection vulnerability in the orderBy parameter at /dict/list.do...
CVE-2022-27466
MCMS v5.2.27 was discovered to contain a SQL injection vulnerability in the orderBy parameter at /dict/list.do...
CVE-2022-27466
MCMS v5.2.27 was discovered to contain a SQL injection vulnerability in the orderBy parameter at /dict/list.do...
Sql injection
MCMS v5.2.27 was discovered to contain a SQL injection vulnerability in the orderBy parameter at /dict/list.do...
CVE-2022-27466
MCMS v5.2.27 contains a SQL injection vulnerability in the orderBy parameter of /dict/list.do. This is documented in CVE-2022-27466 across multiple feeds (NVD entry confirms vulnerable component and endpoint). The Connected documents corroborate the affected product version and vulnerable paramet...
CVE-2022-27466
MCMS v5.2.27 was discovered to contain a SQL injection vulnerability in the orderBy parameter at /dict/list.do...
MingSoft MCMS SQL注入漏洞
MingSoft MCMS is a complete open source J2ee system from China's MingSoft. A security vulnerability exists in MingSoft MCMS version 5.2.27, which originates from a SQL injection vulnerability in the orderBy parameter of /dict/list.do...
Cross-Site Request Forgery (CSRF)
MCMS is vulnerable to cross site request forgery. The vulnerability exists due to lack of handling of parameters, allowing an attacker to bypass authentication and submit request on the behalf of the server and gain access to internal resources via the file or endpoint /role/saveOrUpdateRole.do...
GHSA-G94P-H263-C26Q Cross Site Request Forgery in Mingsoft MCMS
MCMS v5.2.7 contains a Cross-Site Request Forgery CSRF via /role/saveOrUpdateRole.do. This vulnerability allows attackers to escalate privileges and modify data...
Cross Site Request Forgery in Mingsoft MCMS
MCMS v5.2.7 contains a Cross-Site Request Forgery CSRF via /role/saveOrUpdateRole.do. This vulnerability allows attackers to escalate privileges and modify data...
CVE-2022-27340
MCMS v5.2.7 contains a Cross-Site Request Forgery CSRF via /role/saveOrUpdateRole.do. This vulnerability allows attackers to escalate privileges and modify data...
CVE-2022-27340
MCMS v5.2.7 contains a Cross-Site Request Forgery CSRF via /role/saveOrUpdateRole.do. This vulnerability allows attackers to escalate privileges and modify data...
CVE-2022-27340
MCMS v5.2.7 contains a Cross-Site Request Forgery CSRF via /role/saveOrUpdateRole.do. This vulnerability allows attackers to escalate privileges and modify data...
CVE-2022-27340
MCMS v5.2.7 is affected by a Cross-Site Request Forgery via the /role/saveOrUpdateRole.do endpoint. The vulnerability allows an attacker to escalate privileges and modify data, effectively bypassing intended actions on behalf of an authenticated user. Root cause cited across multiple sources is C...
CVE-2022-27340
MCMS v5.2.7 contains a Cross-Site Request Forgery CSRF via /role/saveOrUpdateRole.do. This vulnerability allows attackers to escalate privileges and modify data...
MingSoft MCMS 跨站请求伪造漏洞
MingSoft MCMS is a complete open source J2ee system from MingSoft. A cross-site request forgery vulnerability exists in MingSoft MCMS v5.2.7, which stems from a lack of cross-site request forgery filtering in the file /role/saveOrUpdateRole.do. An attacker can exploit this vulnerability to elevat...
MingSoft MCMS SQL Injection Vulnerability (CNVD-2022-85104)
MingSoft MCMS is a complete open source J2ee system from MingSoft, a Chinese company. mingsoft MCMS has a SQL injection vulnerability, which originates from the lack of filtering and escaping of SQL data in the categoryId parameter of /cms/content/list, and can be used by attackers to execute...