CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

11 matches found

Veracode•added 2025/12/13 5:12 a.m.•31 views

SQL Injection

Mingsoft MCMS is vulnerable to SQL Injection. The vulnerability is due to improper sanitization of user-supplied input in the /mdiy/model/delete URI, which allows an attacker to inject and execute arbitrary SQL commands...

9.8CVSS8.4AI score0.01115EPSS

SaveExploits1References3Affected Software1

RedhatCVE•added 2025/05/22 11:17 p.m.•30 views

CVE-2022-36599

Mingsoft MCMS 5.2.8 was discovered to contain a SQL injection vulnerability in /mdiy/model/delete URI via models Lists...

9.8CVSS7.3AI score0.01115EPSS

SaveExploits1References1

osv_ghsa•added 2022/08/17 12:00 a.m.•87 views

GHSA-W3RC-2WHG-W934 Mingsoft MCMS SQL injection vulnerability in /mdiy/model/delete URI via models List

Mingsoft MCMS 5.2.8 was discovered to contain a SQL injection vulnerability in /mdiy/model/delete URI via models Lists...

9.8CVSS9.8AI score0.01115EPSS

SaveExploits1References3

Github Security Blog•added 2022/08/17 12:00 a.m.•43 views

Mingsoft MCMS SQL injection vulnerability in /mdiy/model/delete URI via models List

Mingsoft MCMS 5.2.8 was discovered to contain a SQL injection vulnerability in /mdiy/model/delete URI via models Lists...

9.8CVSS9.8AI score0.01115EPSS

SaveExploits1References3Affected Software1

NVD•added 2022/08/16 1:15 p.m.•38 views

CVE-2022-36599

Mingsoft MCMS 5.2.8 was discovered to contain a SQL injection vulnerability in /mdiy/model/delete URI via models Lists...

9.8CVSS0.01115EPSS

SaveExploits1References1

attackerkb•added 2022/08/16 1:15 p.m.•10 views

CVE-2022-36599

Mingsoft MCMS 5.2.8 was discovered to contain a SQL injection vulnerability in /mdiy/model/delete URI via models Lists...

9.8CVSS7.4AI score0.01115EPSS

SaveExploits1References2

Mend•added 2022/08/16 12:51 p.m.•5 views

CVE-2022-36599

Mingsoft MCMS 5.2.8 was discovered to contain a SQL injection vulnerability in /mdiy/model/delete URI via models Lists...

9.8CVSS0.01115EPSS

SaveExploits1References3

CVE•added 2022/08/16 12:51 p.m.•129 views

CVE-2022-36599

Affected software: Mingsoft MCMS 5.2.8. Vulnerability: SQL injection in the /mdiy/model/delete URI via models Lists. Root cause / impact: Not explicitly detailed beyond the SQLi vulnerability; CVSS suggests CRITICAL impact (C/H, I/H, A/H) with network access. Exploitation status: Not provided in ...

9.8CVSS8.2AI score0.01115EPSS

SaveExploits1References1Affected Software1

Cvelist•added 2022/08/16 12:51 p.m.•61 views

CVE-2022-36599

Mingsoft MCMS 5.2.8 was discovered to contain a SQL injection vulnerability in /mdiy/model/delete URI via models Lists...

10AI score0.01115EPSS

SaveExploits1References1

CNNVD•added 2022/08/16 12:00 a.m.•23 views

MingSoft MCMS SQL Injection Vulnerability

MingSoft MCMS is a complete open source J2ee system from China's MingSoft. A SQL injection vulnerability exists in MingSoft MCMS version 5.2.8, which originates from a SQL injection vulnerability in the /mdiy/model/delete URI containing a SQL injection via models Lists...

9.8CVSS8.6AI score0.01115EPSS

SaveExploits1References2

Rapid7 Vulnerability Database (full)•added 2022/08/16 12:00 a.m.•7 views

CVE-2022-36599: Improper Neutralization of Special Elements used in an SQL Command

Mingsoft MCMS 5.2.8 was discovered to contain a SQL injection vulnerability in /mdiy/model/delete URI via models Lists...

9.8CVSS8.2AI score0.01115EPSS

SaveExploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by