Mcms Security Vulnerabilities and Issues — Mcms CVE List

Lucene search

MingsoftMcms

7 matches found

CVE•added 2024/02/05 8:15 p.m.•191 views

CVE-2024-22567

File Upload vulnerability in MCMS 5.3.5 allows attackers to upload arbitrary files via crafted POST request to /ms/file/upload.do.

8.8CVSS8.6AI score0.01286EPSS

CVE•added 2022/02/18 7:15 p.m.•99 views

CVE-2021-46037

MCMS v5.2.4 was discovered to contain an arbitrary file deletion vulnerability via the component /template/unzip.do.

8.1CVSS8.1AI score0.00222EPSS

CVE•added 2022/04/22 8:15 p.m.•89 views

CVE-2022-27340

MCMS v5.2.7 contains a Cross-Site Request Forgery (CSRF) via /role/saveOrUpdateRole.do. This vulnerability allows attackers to escalate privileges and modify data.

8.8CVSS8.8AI score0.00285EPSS

CVE•added 2022/06/02 2:15 p.m.•65 views

CVE-2022-29647

An issue was discovered in MCMS 5.2.7. There is a CSRF vulnerability that can add an administrator account via ms/basic/manager/save.do.

8.8CVSS8.6AI score0.00489EPSS

CVE•added 2023/01/26 9:18 p.m.•50 views

CVE-2022-47042

MCMS v5.2.10 and below was discovered to contain an arbitrary file write vulnerability via the component ms/template/writeFileContent.do.

8.8CVSS8.8AI score0.00219EPSS

CVE•added 2023/05/08 2:15 p.m.•40 views

CVE-2020-22755

File upload vulnerability in MCMS 5.0 allows attackers to execute arbitrary code via a crafted thumbnail. A different vulnerability than CVE-2022-31943.

8.8CVSS9.2AI score0.00364EPSS

CVE•added 2024/09/03 4:15 p.m.•40 views

CVE-2024-42991

MCMS v5.4.1 has front-end file upload vulnerability which can lead to remote command execution.

8.1CVSS7AI score0.01563EPSS