Lucene search
MingsoftMcms
2 matches found
CVE-2022-30506
An arbitrary file upload vulnerability was discovered in MCMS 5.2.7, allowing an attacker to execute arbitrary code through a crafted ZIP file.
9.8CVSS9.6AI score0.02519EPSS
CVE-2022-29647
An issue was discovered in MCMS 5.2.7. There is a CSRF vulnerability that can add an administrator account via ms/basic/manager/save.do.
8.8CVSS8.6AI score0.00489EPSS