CVE-2019-11078

MKCMS V5.0 has a CSRF vulnerability to add a new admin user via the ucenter/userinfo.php URI...

CVE-2019-11332

MKCMS 5.0 allows remote attackers to take over arbitrary user accounts by posting a username and e-mail address to ucenter/repass.php, which triggers e-mail transmission with the password, as demonstrated by 123456...

EUVD-2020-15577

Malware in sbrugna...

EUVD-2019-2783

Malware in sbrugna...

EUVD-2020-15576

Malware in sbrugna...

EUVD-2020-15575

Malware in sbrugna...

EUVD-2019-2501

Malware in sbrugna...

CVE-2020-22818

MKCMS V6.2 has SQL injection via /ucenter/reg.php name parameter...

CVE-2020-22819

MKCMS V6.2 has SQL injection via the /ucenter/active.php verify parameter...

CVE-2020-22820

MKCMS V6.2 has SQL injection via the /ucenter/repass.php name parameter...

CVE-2019-10707

MKCMS V5.0 has SQL injection via the bplay.php play parameter...

CVE-2020-22820

MKCMS V6.2 has SQL injection via the /ucenter/repass.php name parameter...

CVE-2020-22819

MKCMS V6.2 has SQL injection via the /ucenter/active.php verify parameter...

CVE-2020-22820

MKCMS V6.2 has SQL injection via the /ucenter/repass.php name parameter...

CVE-2020-22819

MKCMS V6.2 has SQL injection via the /ucenter/active.php verify parameter...

CVE-2020-22818

MKCMS V6.2 has SQL injection via /ucenter/reg.php name parameter...

Sql injection

MKCMS V6.2 has SQL injection via /ucenter/reg.php name parameter...

Sql injection

MKCMS V6.2 has SQL injection via the /ucenter/repass.php name parameter...

Sql injection

MKCMS V6.2 has SQL injection via the /ucenter/active.php verify parameter...

CVE-2020-22818

MKCMS V6.2 contains a SQL injection vulnerability in the /ucenter/reg.php endpoint, exploitable via the name parameter. Affected software: MKCMS V6.2; vulnerability type: SQL injection; root cause: unsanitized input in the name parameter leading to database query manipulation. Potential impact pe...