Lucene search
Veracode Vulnerability DatabaseVERACODE:38436HistoryDec 12, 2022 - 7:07 a.m.
SQL Injection
2022-12-1207:07:06
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
net.mingsoft
ms-mcms
sql injection
categoryaction.java
improper sanitization
sqlwhere
endpoint
EPSS
0.004
Percentile
72.1%
net.mingsoft, ms-mcms is vulnerable to SQL injection. The vulnerability exists due to improper sanitization in the get function of categoryaction.java due to manipulation in the argument sqlWhere, via the /cms/category/list endpoint.
Related
github
github
Mingsoft MCMS vulnerable to SQL Injection
2022-12-09 09:30:30
nvd
nvd
CVE-2022-4375
2022-12-09 08:15:09
cve
cve
CVE-2022-4375
2022-12-09 08:15:09
osv
osv
Mingsoft MCMS vulnerable to SQL Injection
2022-12-09 09:30:30
prion
prion
Sql injection
2022-12-09 08:15:00
cvelist
cvelist
CVE-2022-4375 Mingsoft MCMS list sql injection
2022-12-09 00:00:00