CVE-2020-22819

MKCMS V6.2 has SQL injection via the /ucenter/active.php verify parameter...

MKCMS SQL injection vulnerability

MKCMS is a content management system. A SQL injection vulnerability exists in MKCMS version V6.2, which stems from the verify parameter of its /ucenter/active.php component that allows an attacker to achieve SQL injection...

PT-2022-8649 · Mkcms · Mkcms

Name of the Vulnerable Software and Affected Versions: MKCMS version 6.2 Description: The issue is related to SQL injection. It occurs via the /ucenter/active.php endpoint, specifically through the verify parameter. Recommendations: For MKCMS version 6.2, as a temporary workaround, consider...