CVE-2021-46036

An arbitrary file upload vulnerability in the component /ms/file/uploadTemplate.do of MCMS v5.2.4 allows attackers to execute arbitrary code...

Privilege escalation

An arbitrary file upload vulnerability in the component /ms/file/uploadTemplate.do of MCMS v5.2.4 allows attackers to execute arbitrary code...

Arbitrary file deletion

MCMS v5.2.4 was discovered to contain an arbitrary file deletion vulnerability via the component /template/unzip.do...

CVE-2021-46037

MCMS v5.2.4 is affected by CVE-2021-46037: an arbitrary file deletion vulnerability via the component /template/unzip.do. The issue is described across multiple sources as enabling deletion of files, with CVSS indicators in the NVD entry (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H; base score 8.1 in CVS...

CVE-2021-46037

MCMS v5.2.4 was discovered to contain an arbitrary file deletion vulnerability via the component /template/unzip.do...

CVE-2021-46036

An arbitrary file upload vulnerability in the component /ms/file/uploadTemplate.do of MCMS v5.2.4 allows attackers to execute arbitrary code...

CVE-2021-46036

The vulnerability CVE-2021-46036 affects MCMS v5.2.4, via an arbitrary file upload in the component /ms/file/uploadTemplate.do. The Red Hat, GitHub advisories, OSV, and CVE records in connected sources corroborate an RCE risk from this upload path. The root cause is not explicitly detailed across...

GHSA-2PMW-CVC7-FRVH SQL injection in MCMS

A problem was found in ming-soft MCMS v5.1. There is a sql injection vulnerability in /ms/cms/content/list.do...

SQL injection in MCMS

A problem was found in ming-soft MCMS v5.1. There is a sql injection vulnerability in /ms/cms/content/list.do...

MingSoft MCMS 代码问题漏洞

MingSoft MCMS is a complete open source J2ee system from China's MingSoft. A security vulnerability exists in MingSoft MCMS due to an arbitrary file upload vulnerability in the component ms file uploadTemplate. An attacker can exploit this vulnerability to execute arbitrary code...

MingSoft MCMS 代码代码注入漏洞

MingSoft MCMS is a complete open source J2ee system from MingSoft, China. A code injection vulnerability exists in MingSoft MCMS that stems from the inclusion of a server-side template injection SSTI vulnerability in the template management...

MingSoft MCMS 安全漏洞

MingSoft MCMS is a complete open source J2ee system from MingSoft. A security vulnerability exists in MCMS, which was discovered to contain an arbitrary file deletion vulnerability via the component oldFileName...

MCMS of Jiangxi Minsoft Technology Co., Ltd. has unspecified vulnerabilities

Mcms is a complete open source J2ee system from Jiangxi Mingsoft Technology Co. Mcms v5.1 version has a SQL injection vulnerability, which can be exploited by attackers to perform sql injection via /ms/cms/content/list.do...

MingSoft MCMS 安全漏洞

MingSoft MCMS is a complete open source J2ee system from MingSoft, a Chinese company. A security vulnerability exists in MingSoft MCMS that stems from the component template unzip.do that was discovered in MCMS v5.2.4 to contain an arbitrary file deletion vulnerability...

CVE-2021-44868

A problem was found in ming-soft MCMS v5.1. There is a sql injection vulnerability in /ms/cms/content/list.do...

Sql injection

A problem was found in ming-soft MCMS v5.1. There is a sql injection vulnerability in /ms/cms/content/list.do...

CVE-2021-44868

The vulnerability CVE-2021-44868 affects Ming-soft MCMS v5.1. A SQL injection flaw exists in the /ms/cms/content/list.do endpoint, enabling potentially unauthorized access to backend data. Documented under CVSS metrics, the issue has a CVSS v3.1 base score of 9.8 (CRITICAL) with NETWORK attack ve...

CVE-2021-44868

A problem was found in ming-soft MCMS v5.1. There is a sql injection vulnerability in /ms/cms/content/list.do...

MingSoft MCMS 安全漏洞

Mcms is a complete open source J2ee system from Jiangxi Mingsoft Technology Co. Mcms v5.1 version has a SQL injection vulnerability, which can be exploited by attackers to perform sql injection via /ms/cms/content/list.do...

MCMS has SQL injection vulnerability (CNVD-2022-17364)

MCMS is a lightweight open source content management system developed on java.MCMS is vulnerable to SQL injection, which can be exploited by attackers to obtain sensitive database information...