Lucene search
+L

7 matches found

Github Security Blog
Github Security Blog
•added 2022/01/27 12:00 a.m.•34 views

Mingsoft MCMS SQL injection vulnerability

Mingsoft MCMS contains a SQL injection vulnerability in the /querydata endpoint...

7.5CVSS8.1AI score0.01524EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2022/01/27 12:00 a.m.•62 views

GHSA-PHWQ-9GC4-Q5C8 Mingsoft MCMS SQL injection vulnerability

Mingsoft MCMS contains a SQL injection vulnerability in the /querydata endpoint...

7.5CVSS7.8AI score0.01524EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2022/01/26 7:15 p.m.•23 views

CVE-2021-46385

https://gitee.com/mingSoft/MCMS MCMS =5.2.5 is affected by: SQL Injection. The impact is: obtain sensitive information remote. The component is: net.mingsoft.mdiy.action.FormDataActionqueryData. The attack vector is: 0 or sleep3. ¶¶ MCMS has a sql injection vulnerability through which attacker ca...

7.5CVSS7.3AI score0.01524EPSS
SaveExploits1References2
NVD
NVD
•added 2022/01/26 7:15 p.m.•29 views

CVE-2021-46385

https://gitee.com/mingSoft/MCMS MCMS =5.2.5 is affected by: SQL Injection. The impact is: obtain sensitive information remote. The component is: net.mingsoft.mdiy.action.FormDataActionqueryData. The attack vector is: 0 or sleep3. ¶¶ MCMS has a sql injection vulnerability through which attacker ca...

7.5CVSS0.01524EPSS
SaveExploits1References1
Mend
Mend
•added 2022/01/26 6:35 p.m.•5 views

CVE-2021-46385

https://gitee.com/mingSoft/MCMS MCMS =5.2.5 is affected by: SQL Injection. The impact is: obtain sensitive information remote. The component is: net.mingsoft.mdiy.action.FormDataActionqueryData. The attack vector is: 0 or sleep3. ¶¶ MCMS has a sql injection vulnerability through which attacker ca...

8.7CVSS0.01524EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/26 12:00 a.m.•5 views

CVE-2021-46385: Improper Neutralization of Special Elements used in an SQL Command

https://gitee.com/mingSoft/MCMS MCMS =5.2.5 is affected by: SQL Injection. The impact is: obtain sensitive information remote. The component is: net.mingsoft.mdiy.action.FormDataActionqueryData. The attack vector is: 0 or sleep3. ¶¶ MCMS has a sql injection vulnerability through which attacker ca...

7.5CVSS5.7AI score0.01524EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/01/26 12:00 a.m.•4 views

PT-2022-12682

Name of the Vulnerable Software and Affected Versions Mingsoft MCMS versions 5.2.5 and earlier Description The issue allows an attacker to obtain sensitive information from the database through a SQL injection vulnerability. The component net.mingsoft.mdiy.action.FormDataActionqueryData is...

7.5CVSS0.01524EPSS
SaveExploits1References6
Rows per page
Query Builder