CVE-2024-33748

Cross-site scripting XSS vulnerability in the search function in Maven net.mingsoft MS Basic 2.1.13.4 and earlier...

com.ahome-it:ahome-tooling-server-core (>=1.1.5-release, <=1.1.9-release), com.ahome-it:ahome-tooling-server-hazelcast (>=1.1.5-release, <=1.1.9-release) +17 more potentially affected by CVE-2025-22228 via org.springframework.security:spring-security-crypto (4.1.2.release)

org.springframework.security:spring-security-crypto MAVEN version 4.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-crypto and may be impacted: - com.ahome-it:ahome-tooling-server-core...

Cross-site Scripting (XSS)

MS Basic vulnerable to a cross-site scripting XSS vulnerability. The vulnerability is due to insufficient input sanitization in the search function, allowing attackers to inject malicious scripts into the search input, potentially leading to the execution of arbitrary code in the context of other...

net.mingsoft:ms-mdiy (1.0.10), net.mingsoft:ms-mpeople (1.0.10) +1 more potentially affected by CVE-2024-33748 via net.mingsoft:ms-basic (1.0.14)

net.mingsoft:ms-basic MAVEN version 1.0.14 is affected by a known vulnerability. The following packages have a transitive dependency on net.mingsoft:ms-basic and may be impacted: - net.mingsoft:ms-mdiy 1.0.10 - net.mingsoft:ms-mpeople 1.0.10 - net.mingsoft:ms-upgrader 1.0.11 Source cves:...

MS Basic Cross-site Scripting vulnerability

Cross-site scripting XSS vulnerability in the search function in Maven net.mingsoft MS Basic 2.1.13.4 and earlier...

GHSA-64CM-3CJ3-67HF MS Basic Cross-site Scripting vulnerability

Cross-site scripting XSS vulnerability in the search function in Maven net.mingsoft MS Basic 2.1.13.4 and earlier...

CVE-2024-33748

Cross-site scripting XSS vulnerability in the search function in Maven net.mingsoft MS Basic 2.1.13.4 and earlier...

CVE-2024-33748

Cross-site scripting XSS vulnerability in the search function in Maven net.mingsoft MS Basic 2.1.13.4 and earlier...

CVE-2024-33748

Cross-site scripting XSS vulnerability in the search function in Maven net.mingsoft MS Basic 2.1.13.4 and earlier...

CVE-2024-33748

The Maven net.mingsoft MS Basic library (versions 2.1.13.4 and earlier ) is vulnerable to a Cross-site Scripting (XSS) vulnerability within its search function . The root cause is insufficient input sanitization , which allows attackers to inject malicious scripts into the search input. This coul...

CVE-2024-33748: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the search function in Maven net.mingsoft MS Basic 2.1.13.4 and earlier...

CVE-2022-29647

An issue was discovered in MCMS 5.2.7. There is a CSRF vulnerability that can add an administrator account via ms/basic/manager/save.do...

PT-2022-19751

Name of the Vulnerable Software and Affected Versions MCMS version 5.2.7 Description An issue was discovered that allows for a CSRF vulnerability, enabling the addition of an administrator account via the "ms/basic/manager/save.do" API endpoint. Recommendations For MCMS version 5.2.7, as a...

CVE-2022-29647: Cross-Site Request Forgery (CSRF)

An issue was discovered in MCMS 5.2.7. There is a CSRF vulnerability that can add an administrator account via ms/basic/manager/save.do...

MCMS Arbitrary File Deletion vulnerability

net.mingsoft:ms-basic is used for plugin management for applications built with Maven for the Mingfei Content Management System MCMS. ms-basic before 2.1.16 is vulnerable to arbitrary file deletion using POST requests to /template/writeFileContent via the oldFileName parameter. MCMS before 5.2.11...

GHSA-RPVR-MW7R-25XX MCMS Arbitrary File Deletion vulnerability

net.mingsoft:ms-basic is used for plugin management for applications built with Maven for the Mingfei Content Management System MCMS. ms-basic before 2.1.16 is vulnerable to arbitrary file deletion using POST requests to /template/writeFileContent via the oldFileName parameter. MCMS before 5.2.11...

PT-2018-13995

Name of the Vulnerable Software and Affected Versions MCMS version 4.6.5 Description An issue was discovered that allows for a CSRF vulnerability, enabling the addition of an administrator account via the "ms/basic/manager/save.do" endpoint. Recommendations For MCMS version 4.6.5, consider...

CVE-2018-17366: Cross-Site Request Forgery (CSRF)

An issue was discovered in MCMS 4.6.5. There is a CSRF vulnerability that can add an administrator account via ms/basic/manager/save.do...