5 matches found
CVE-2021-46384
https://gitee.com/mingSoft/MCMS MCMS
CVE-2022-4375
A vulnerability was found in Mingsoft MCMS up to 5.2.9. It has been classified as critical. Affected is an unknown function of the file /cms/category/list. The manipulation of the argument sqlWhere leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed ...
CVE-2021-46386
File upload vulnerability in mingSoft MCMS through 5.2.5, allows remote attackers to execute arbitrary code via a crafted jspx webshell to net.mingsoft.basic.action.web.FileAction#upload.
CVE-2021-46385
https://gitee.com/mingSoft/MCMS MCMS
CVE-2021-46383
https://gitee.com/mingSoft/MCMS MCMS