Mingsoft

Mcms

52 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.1

CVE-2024-42991

Exploit
  • EPSS 0.81%
  • Veröffentlicht 03.09.2024 16:15:06
  • Zuletzt bearbeitet 30.04.2025 16:42:01

MCMS v5.4.1 has front-end file upload vulnerability which can lead to remote command execution.

8.8

CVE-2024-22567

Exploit
  • EPSS 17.79%
  • Veröffentlicht 05.02.2024 20:15:55
  • Zuletzt bearbeitet 17.06.2025 15:15:39

File Upload vulnerability in MCMS 5.3.5 allows attackers to upload arbitrary files via crafted POST request to /ms/file/upload.do.

7.5

CVE-2023-51282

Exploit
  • EPSS 1.12%
  • Veröffentlicht 16.01.2024 02:15:28
  • Zuletzt bearbeitet 17.06.2025 15:15:36

An issue in mingSoft MCMS v.5.2.4 allows a a remote attacker to obtain sensitive information via a crafted script to the password parameter.

9.8

CVE-2023-50578

Exploit
  • EPSS 2.24%
  • Veröffentlicht 30.12.2023 16:15:44
  • Zuletzt bearbeitet 21.11.2024 08:37:05

Mingsoft MCMS v5.2.9 was discovered to contain a SQL injection vulnerability via the categoryType parameter at /content/list.do.

6.1

CVE-2023-3990

Exploit
  • EPSS 1.42%
  • Veröffentlicht 28.07.2023 07:15:09
  • Zuletzt bearbeitet 21.11.2024 08:18:29

A vulnerability classified as problematic has been found in Mingsoft MCMS up to 5.3.1. This affects an unknown part of the file search.do of the component HTTP POST Request Handler. The manipulation of the argument style leads to cross site scripting...

8.8

CVE-2020-22755

Exploit
  • EPSS 0.92%
  • Veröffentlicht 08.05.2023 14:15:10
  • Zuletzt bearbeitet 29.01.2025 17:15:11

File upload vulnerability in MCMS 5.0 allows attackers to execute arbitrary code via a crafted thumbnail. A different vulnerability than CVE-2022-31943.

9.8

CVE-2020-20913

Exploit
  • EPSS 1.42%
  • Veröffentlicht 04.04.2023 15:15:08
  • Zuletzt bearbeitet 14.02.2025 16:15:30

SQL Injection vulnerability found in Ming-Soft MCMS v.4.7.2 allows a remote attacker to execute arbitrary code via basic_title parameter.

8.8

CVE-2022-47042

Exploit
  • EPSS 1.03%
  • Veröffentlicht 26.01.2023 21:18:02
  • Zuletzt bearbeitet 02.04.2025 16:15:22

MCMS v5.2.10 and below was discovered to contain an arbitrary file write vulnerability via the component ms/template/writeFileContent.do.

5.4

CVE-2022-4640

Exploit
  • EPSS 0.41%
  • Veröffentlicht 21.12.2022 22:15:08
  • Zuletzt bearbeitet 21.11.2024 07:35:39

A vulnerability has been found in Mingsoft MCMS 5.2.9 and classified as problematic. Affected by this vulnerability is the function save of the component Article Handler. The manipulation leads to cross site scripting. The attack can be launched remo...

9.8

CVE-2022-4375

Exploit
  • EPSS 2.89%
  • Veröffentlicht 09.12.2022 08:15:09
  • Zuletzt bearbeitet 21.11.2024 07:35:09

A vulnerability was found in Mingsoft MCMS up to 5.2.9. It has been classified as critical. Affected is an unknown function of the file /cms/category/list. The manipulation of the argument sqlWhere leads to sql injection. It is possible to launch the...