CVE-2020-22819

CVE-2020-22819 affects MKCMS V6.2, with a SQL injection in the /ucenter/active.php endpoint via the verify parameter. Public documents consistently describe an SQLi vulnerability in MKCMS 6.2 hosted parameter, leading to high-impact confidentiality/integrity/availability (CVSS 3.1 base 9.8). Root...

MKCMS SQL注入漏洞

MKCMS is a content management system. A SQL injection vulnerability exists in MKCMS version V6.2, which originates from the name parameter of its /ucenter/reg.php component that allows an attacker to achieve SQL injection...

PT-2022-8648 · Mkcms · Mkcms

Name of the Vulnerable Software and Affected Versions: MKCMS version 6.2 Description: The issue is related to SQL injection. It occurs via the /ucenter/reg.php API endpoint, specifically through the name parameter. Recommendations: For MKCMS version 6.2, as a temporary workaround, consider...

PT-2022-8649 · Mkcms · Mkcms

Name of the Vulnerable Software and Affected Versions: MKCMS version 6.2 Description: The issue is related to SQL injection. It occurs via the /ucenter/active.php endpoint, specifically through the verify parameter. Recommendations: For MKCMS version 6.2, as a temporary workaround, consider...

CVE-2020-22818

MKCMS V6.2 has SQL injection via /ucenter/reg.php name parameter...

CVE-2020-22818

MKCMS V6.2 contains a SQL injection vulnerability in the /ucenter/reg.php endpoint, exploitable via the name parameter. Affected software: MKCMS V6.2; vulnerability type: SQL injection; root cause: unsanitized input in the name parameter leading to database query manipulation. Potential impact pe...

PT-2022-8650 · Mkcms · Mkcms

Name of the Vulnerable Software and Affected Versions: MKCMS version 6.2 Description: The issue is related to SQL injection via the "/ucenter/repass.php" API endpoint, specifically through the name parameter. This allows for potential exploitation. Recommendations: For MKCMS version 6.2, as a...

CVE-2020-22820

MKCMS V6.2 has SQL injection via the /ucenter/repass.php name parameter...

CVE-2020-22819

MKCMS V6.2 has SQL injection via the /ucenter/active.php verify parameter...

CVE-2020-22818

MKCMS V6.2 has SQL injection via /ucenter/reg.php name parameter...

CVE-2020-22820

MKCMS V6.2 has SQL injection via the /ucenter/repass.php name parameter...

CVE-2020-22820

MKCMS V6.2 is affected by an SQL injection vulnerability in the /ucenter/repass.php endpoint, exploitable via the name parameter. The CVSS vector indicates network access, no authentication, and high impact on confidentiality, integrity, and availability (score 9.8). Several connected sources cor...

MKCMS official version suffers from SQL injection vulnerability (CNVD-2021-16408)

MKCMS is a free and open source PHP web content management system developed by Yakun Technology. MKCMS official version of the existence of SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive information in the database...

MKCMS official version suffers from SQL injection vulnerability (CNVD-2021-16411)

MKCMS is a free and open source PHP web content management system developed by Yakun Technology. MKCMS official version of the existence of SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in MKCMS Official Version

MKCMS is a free and open source PHP web content management system developed by Yakun Technology. MKCMS official version of the existence of SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive information in the database...

MKCMS official version suffers from SQL injection vulnerability (CNVD-2021-16410)

MKCMS is a free and open source PHP web content management system developed by Yakun Technology. MKCMS official version of the existence of SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive information in the database...

MKCMS official version suffers from SQL injection vulnerability (CNVD-2021-16407)

MKCMS is a free and open source PHP web content management system developed by Yakun Technology. MKCMS official version of the existence of SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive information in the database...

mkCMS v6.2.6 SQL Injection Vulnerability in Backend

mkCMS is a free and open source PHP content management system, small yet powerful, with tons of templates and more. mkCMS v6.2.6 has a SQL injection vulnerability in the background, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in mkcms Backend

mkcms is a film and television management system developed specifically for different webmasters. There are SQL injection vulnerabilities in the mkcms backend, which can be exploited by attackers to gain access to sensitive database information...

MKCMS suffers from SQL injection vulnerability (CNVD-2020-33188)

MKCMS is a film and television management system, support for independent modification, users can directly upload the server to generate a website platform, you can add the background to modify the project and so on. MKCMS SQL injection vulnerability, attackers can use the vulnerability to obtain...