7 matches found
Mingsoft MCMS SQL injection vulnerability
Mingsoft MCMS contains a SQL injection vulnerability in the /querydata endpoint...
GHSA-PHWQ-9GC4-Q5C8 Mingsoft MCMS SQL injection vulnerability
Mingsoft MCMS contains a SQL injection vulnerability in the /querydata endpoint...
CVE-2021-46385
https://gitee.com/mingSoft/MCMS MCMS =5.2.5 is affected by: SQL Injection. The impact is: obtain sensitive information remote. The component is: net.mingsoft.mdiy.action.FormDataActionqueryData. The attack vector is: 0 or sleep3. ¶¶ MCMS has a sql injection vulnerability through which attacker ca...
CVE-2021-46385
https://gitee.com/mingSoft/MCMS MCMS =5.2.5 is affected by: SQL Injection. The impact is: obtain sensitive information remote. The component is: net.mingsoft.mdiy.action.FormDataActionqueryData. The attack vector is: 0 or sleep3. ¶¶ MCMS has a sql injection vulnerability through which attacker ca...
CVE-2021-46385
https://gitee.com/mingSoft/MCMS MCMS =5.2.5 is affected by: SQL Injection. The impact is: obtain sensitive information remote. The component is: net.mingsoft.mdiy.action.FormDataActionqueryData. The attack vector is: 0 or sleep3. ¶¶ MCMS has a sql injection vulnerability through which attacker ca...
CVE-2021-46385: Improper Neutralization of Special Elements used in an SQL Command
https://gitee.com/mingSoft/MCMS MCMS =5.2.5 is affected by: SQL Injection. The impact is: obtain sensitive information remote. The component is: net.mingsoft.mdiy.action.FormDataActionqueryData. The attack vector is: 0 or sleep3. ¶¶ MCMS has a sql injection vulnerability through which attacker ca...
PT-2022-12682
Name of the Vulnerable Software and Affected Versions Mingsoft MCMS versions 5.2.5 and earlier Description The issue allows an attacker to obtain sensitive information from the database through a SQL injection vulnerability. The component net.mingsoft.mdiy.action.FormDataActionqueryData is...