Show filters
2 Total Results
Displaying 1-2 of 2
Sort by:
Attacker Value
Unknown
CVE-2020-22755
Disclosure Date: May 08, 2023 (last updated October 08, 2023)
File upload vulnerability in MCMS 5.0 allows attackers to execute arbitrary code via a crafted thumbnail. A different vulnerability than CVE-2022-31943.
0
Attacker Value
Unknown
CVE-2020-23262
Disclosure Date: January 26, 2021 (last updated February 22, 2025)
An issue was discovered in ming-soft MCMS v5.0, where a malicious user can exploit SQL injection without logging in through /mcms/view.do.
0
