Lucene search
+L

32 matches found

Mend
Mend
•added 2022/02/17 3:44 p.m.•4 views

CVE-2021-44868

A problem was found in ming-soft MCMS v5.1. There is a sql injection vulnerability in /ms/cms/content/list.do...

9.8CVSS0.01412EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/17 12:00 a.m.•6 views

CVE-2021-44868: Improper Neutralization of Special Elements used in an SQL Command

A problem was found in ming-soft MCMS v5.1. There is a sql injection vulnerability in /ms/cms/content/list.do...

9.8CVSS8.1AI score0.01412EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/02/17 12:00 a.m.•2 views

PT-2022-12250

Name of the Vulnerable Software and Affected Versions ming-soft MCMS version 5.1 Description A problem was found in ming-soft MCMS, which has a sql injection vulnerability in the "/ms/cms/content/list.do" API endpoint. Recommendations For ming-soft MCMS version 5.1, consider restricting access to...

9.8CVSS0.01412EPSS
SaveExploits1References6
Github Security Blog
Github Security Blog
•added 2022/02/09 10:18 p.m.•38 views

SQL injection without credentials in ming-soft MCMS

An issue was discovered in ming-soft MCMS v5.0, where a malicious user can exploit SQL injection without logging in through /mcms/view.do...

9.8CVSS9.7AI score0.01145EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2022/02/09 10:18 p.m.•57 views

GHSA-H3HW-G4HM-7GR4 SQL injection without credentials in ming-soft MCMS

An issue was discovered in ming-soft MCMS v5.0, where a malicious user can exploit SQL injection without logging in through /mcms/view.do...

9.8CVSS9.8AI score0.01145EPSS
SaveExploits1References2
Check Point Advisories
Check Point Advisories
•added 2021/02/07 12:00 a.m.•81 views

Ming-Soft MCMS SQL Injection (CVE-2020-23262)

An SQL injection vulnerability exists in Ming-Soft MCMS. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

7.5CVSS5.2AI score0.01145EPSS
SaveExploits1
OSV
OSV
•added 2021/01/26 6:15 p.m.•15 views

CVE-2020-23262

An issue was discovered in ming-soft MCMS v5.0, where a malicious user can exploit SQL injection without logging in through /mcms/view.do...

9.8CVSS7.3AI score0.01145EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2021/01/26 12:00 a.m.•16 views

Ming-soft Mcms SQL Injection Vulnerability

A SQL injection vulnerability exists in Ming-soft Mcms version 5.0. An attacker can exploit the SQL injection without logging in via /mcms/view.do...

9.8CVSS7.4AI score0.01145EPSS
SaveExploits1References2
Mend
Mend
•added 2021/01/22 3:35 p.m.•3 views

CVE-2020-23262

An issue was discovered in ming-soft MCMS v5.0, where a malicious user can exploit SQL injection without logging in through /mcms/view.do...

9.8CVSS0.01145EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2021/01/22 3:35 p.m.•43 views

CVE-2020-23262

An issue was discovered in ming-soft MCMS v5.0, where a malicious user can exploit SQL injection without logging in through /mcms/view.do...

9.9AI score0.01145EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2021/01/22 12:00 a.m.•3 views

PT-2021-10871

Name of the Vulnerable Software and Affected Versions ming-soft MCMS version 5.0 Description An issue was discovered where a malicious user can exploit SQL injection without logging in through the "/mcms/view.do" API endpoint. Recommendations For ming-soft MCMS version 5.0, consider restricting...

9.8CVSS5.7AI score0.01145EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/22 12:00 a.m.•10 views

CVE-2020-23262: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in ming-soft MCMS v5.0, where a malicious user can exploit SQL injection without logging in through /mcms/view.do...

9.8CVSS5.8AI score0.01145EPSS
SaveExploits1References2
Rows per page
Query Builder