CVE-2019-11078

MKCMS V5.0 has a CSRF vulnerability to add a new admin user via the ucenter/userinfo.php URI...

CVE-2019-11332

MKCMS 5.0 allows remote attackers to take over arbitrary user accounts by posting a username and e-mail address to ucenter/repass.php, which triggers e-mail transmission with the password, as demonstrated by 123456...

EUVD-2020-15577

Malware in sbrugna...

EUVD-2020-15576

Malware in sbrugna...

EUVD-2019-2783

Malware in sbrugna...

EUVD-2020-15575

Malware in sbrugna...

EUVD-2019-2501

Malware in sbrugna...

CVE-2020-22818

MKCMS V6.2 has SQL injection via /ucenter/reg.php name parameter...

CVE-2020-22819

MKCMS V6.2 has SQL injection via the /ucenter/active.php verify parameter...

CVE-2020-22820

MKCMS V6.2 has SQL injection via the /ucenter/repass.php name parameter...

CVE-2019-10707

MKCMS V5.0 has SQL injection via the bplay.php play parameter...

CVE-2020-22819

MKCMS V6.2 has SQL injection via the /ucenter/active.php verify parameter...

CVE-2020-22820

MKCMS V6.2 has SQL injection via the /ucenter/repass.php name parameter...

CVE-2020-22820

MKCMS V6.2 has SQL injection via the /ucenter/repass.php name parameter...

CVE-2020-22819

MKCMS V6.2 has SQL injection via the /ucenter/active.php verify parameter...

CVE-2020-22818

MKCMS V6.2 has SQL injection via /ucenter/reg.php name parameter...

Sql injection

MKCMS V6.2 has SQL injection via the /ucenter/active.php verify parameter...

Sql injection

MKCMS V6.2 has SQL injection via /ucenter/reg.php name parameter...

Sql injection

MKCMS V6.2 has SQL injection via the /ucenter/repass.php name parameter...

PT-2022-8649 · Mkcms · Mkcms

Name of the Vulnerable Software and Affected Versions: MKCMS version 6.2 Description: The issue is related to SQL injection. It occurs via the /ucenter/active.php endpoint, specifically through the verify parameter. Recommendations: For MKCMS version 6.2, as a temporary workaround, consider...