Show filters
40 Total Results
Displaying 11-20 of 40
Sort by:
Attacker Value
Unknown
CVE-2022-36599
Disclosure Date: August 16, 2022 (last updated February 24, 2025)
Mingsoft MCMS 5.2.8 was discovered to contain a SQL injection vulnerability in /mdiy/model/delete URI via models Lists.
0
Attacker Value
Unknown
CVE-2022-36272
Disclosure Date: August 16, 2022 (last updated February 24, 2025)
Mingsoft MCMS 5.2.8 was discovered to contain a SQL injection vulnerability in /mdiy/page/verify URI via fieldName parameter.
0
Attacker Value
Unknown
CVE-2022-31943
Disclosure Date: July 01, 2022 (last updated February 24, 2025)
MCMS v5.2.8 was discovered to contain an arbitrary file upload vulnerability.
0
Attacker Value
Unknown
CVE-2022-30506
Disclosure Date: June 02, 2022 (last updated February 23, 2025)
An arbitrary file upload vulnerability was discovered in MCMS 5.2.7, allowing an attacker to execute arbitrary code through a crafted ZIP file.
0
Attacker Value
Unknown
CVE-2022-29647
Disclosure Date: June 02, 2022 (last updated February 23, 2025)
An issue was discovered in MCMS 5.2.7. There is a CSRF vulnerability that can add an administrator account via ms/basic/manager/save.do.
0
Attacker Value
Unknown
CVE-2022-30048
Disclosure Date: May 11, 2022 (last updated February 23, 2025)
Mingsoft MCMS 5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/list URI via orderBy parameter.
0
Attacker Value
Unknown
CVE-2022-30047
Disclosure Date: May 11, 2022 (last updated February 23, 2025)
Mingsoft MCMS v5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/listExcludeApp URI via orderBy parameter.
0
Attacker Value
Unknown
CVE-2022-27466
Disclosure Date: May 02, 2022 (last updated February 23, 2025)
MCMS v5.2.27 was discovered to contain a SQL injection vulnerability in the orderBy parameter at /dict/list.do.
0
Attacker Value
Unknown
CVE-2022-27340
Disclosure Date: April 22, 2022 (last updated February 23, 2025)
MCMS v5.2.7 contains a Cross-Site Request Forgery (CSRF) via /role/saveOrUpdateRole.do. This vulnerability allows attackers to escalate privileges and modify data.
0
Attacker Value
Unknown
CVE-2022-26585
Disclosure Date: April 05, 2022 (last updated February 23, 2025)
Mingsoft MCMS v5.2.7 was discovered to contain a SQL injection vulnerability via /cms/content/list.
0
