32 matches found
CVE-2021-44868
A problem was found in ming-soft MCMS v5.1. There is a sql injection vulnerability in /ms/cms/content/list.do...
CVE-2021-44868: Improper Neutralization of Special Elements used in an SQL Command
A problem was found in ming-soft MCMS v5.1. There is a sql injection vulnerability in /ms/cms/content/list.do...
PT-2022-12250
Name of the Vulnerable Software and Affected Versions ming-soft MCMS version 5.1 Description A problem was found in ming-soft MCMS, which has a sql injection vulnerability in the "/ms/cms/content/list.do" API endpoint. Recommendations For ming-soft MCMS version 5.1, consider restricting access to...
SQL injection without credentials in ming-soft MCMS
An issue was discovered in ming-soft MCMS v5.0, where a malicious user can exploit SQL injection without logging in through /mcms/view.do...
GHSA-H3HW-G4HM-7GR4 SQL injection without credentials in ming-soft MCMS
An issue was discovered in ming-soft MCMS v5.0, where a malicious user can exploit SQL injection without logging in through /mcms/view.do...
Ming-Soft MCMS SQL Injection (CVE-2020-23262)
An SQL injection vulnerability exists in Ming-Soft MCMS. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
CVE-2020-23262
An issue was discovered in ming-soft MCMS v5.0, where a malicious user can exploit SQL injection without logging in through /mcms/view.do...
Ming-soft Mcms SQL Injection Vulnerability
A SQL injection vulnerability exists in Ming-soft Mcms version 5.0. An attacker can exploit the SQL injection without logging in via /mcms/view.do...
CVE-2020-23262
An issue was discovered in ming-soft MCMS v5.0, where a malicious user can exploit SQL injection without logging in through /mcms/view.do...
CVE-2020-23262
An issue was discovered in ming-soft MCMS v5.0, where a malicious user can exploit SQL injection without logging in through /mcms/view.do...
PT-2021-10871
Name of the Vulnerable Software and Affected Versions ming-soft MCMS version 5.0 Description An issue was discovered where a malicious user can exploit SQL injection without logging in through the "/mcms/view.do" API endpoint. Recommendations For ming-soft MCMS version 5.0, consider restricting...
CVE-2020-23262: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in ming-soft MCMS v5.0, where a malicious user can exploit SQL injection without logging in through /mcms/view.do...