Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
MingsoftMcms

8 matches found

CVE
CVE•added 2022/01/21 12:15 a.m.•137 views

CVE-2022-23315

MCMS v5.2.4 was discovered to contain an arbitrary file upload vulnerability via the component /ms/template/writeFileContent.do.

9.8CVSS9.6AI score0.00678EPSS
CVE
CVE•added 2022/01/21 12:15 a.m.•116 views

CVE-2022-22928

MCMS v5.2.4 was discovered to have a hardcoded shiro-key, allowing attackers to exploit the key and execute arbitrary code.

9.8CVSS9.7AI score0.02316EPSS
CVE
CVE•added 2022/01/21 12:15 a.m.•91 views

CVE-2022-23314

MCMS v5.2.4 was discovered to contain a SQL injection vulnerability via /ms/mdiy/model/importJson.do.

9.8CVSS9.8AI score0.00402EPSS
CVE
CVE•added 2022/01/21 12:15 a.m.•76 views

CVE-2022-22929

MCMS v5.2.4 was discovered to have an arbitrary file upload vulnerability in the New Template module, which allows attackers to execute arbitrary code via a crafted ZIP file.

9.8CVSS9.6AI score0.02652EPSS
CVE
CVE•added 2022/01/21 12:15 a.m.•50 views

CVE-2022-22930

A remote code execution (RCE) vulnerability in the Template Management function of MCMS v5.2.4 allows attackers to execute arbitrary code via a crafted payload.

9.8CVSS9.7AI score0.18145EPSS
CVE
CVE•added 2022/01/26 5:15 p.m.•48 views

CVE-2021-46386

File upload vulnerability in mingSoft MCMS through 5.2.5, allows remote attackers to execute arbitrary code via a crafted jspx webshell to net.mingsoft.basic.action.web.FileAction#upload.

9.8CVSS9.6AI score0.06397EPSS
CVE
CVE•added 2022/01/26 7:15 p.m.•46 views

CVE-2021-46385

https://gitee.com/mingSoft/MCMS MCMS

7.5CVSS7.6AI score0.0044EPSS
CVE
CVE•added 2022/01/26 5:15 p.m.•41 views

CVE-2021-46383

https://gitee.com/mingSoft/MCMS MCMS

7.5CVSS7.6AI score0.0044EPSS