Mcms@5.2.7 Security Vulnerabilities and Issues — Mcms@5.2.7 CVE List

Lucene search

MingsoftMcms5.2.7

7 matches found

CVE•added 2022/04/05 1:15 a.m.•104 views

CVE-2022-26585

Mingsoft MCMS v5.2.7 was discovered to contain a SQL injection vulnerability via /cms/content/list.

9.8CVSS9.8AI score0.17904EPSS

CVE•added 2022/06/02 2:15 p.m.•91 views

CVE-2022-30506

An arbitrary file upload vulnerability was discovered in MCMS 5.2.7, allowing an attacker to execute arbitrary code through a crafted ZIP file.

9.8CVSS9.6AI score0.02519EPSS

CVE•added 2022/04/22 8:15 p.m.•89 views

CVE-2022-27340

MCMS v5.2.7 contains a Cross-Site Request Forgery (CSRF) via /role/saveOrUpdateRole.do. This vulnerability allows attackers to escalate privileges and modify data.

8.8CVSS8.8AI score0.00285EPSS

CVE•added 2022/06/02 2:15 p.m.•65 views

CVE-2022-29647

An issue was discovered in MCMS 5.2.7. There is a CSRF vulnerability that can add an administrator account via ms/basic/manager/save.do.

8.8CVSS8.6AI score0.00489EPSS

CVE•added 2022/05/11 6:15 p.m.•59 views

CVE-2022-30048

Mingsoft MCMS 5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/list URI via orderBy parameter.

9.8CVSS9.8AI score0.00355EPSS

CVE•added 2022/12/09 8:15 a.m.•58 views

CVE-2022-4375

A vulnerability was found in Mingsoft MCMS up to 5.2.9. It has been classified as critical. Affected is an unknown function of the file /cms/category/list. The manipulation of the argument sqlWhere leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed ...

9.8CVSS8.3AI score0.49341EPSS

CVE•added 2022/05/11 6:15 p.m.•57 views

CVE-2022-30047

Mingsoft MCMS v5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/listExcludeApp URI via orderBy parameter.

9.8CVSS9.8AI score0.00355EPSS