Mingsoft

Mcms

47 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2020-22755

Exploit
  • EPSS 0.13%
  • Veröffentlicht 08.05.2023 14:15:10
  • Zuletzt bearbeitet 29.01.2025 17:15:11

File upload vulnerability in MCMS 5.0 allows attackers to execute arbitrary code via a crafted thumbnail. A different vulnerability than CVE-2022-31943.

9.8

CVE-2020-20913

Exploit
  • EPSS 3.67%
  • Veröffentlicht 04.04.2023 15:15:08
  • Zuletzt bearbeitet 14.02.2025 16:15:30

SQL Injection vulnerability found in Ming-Soft MCMS v.4.7.2 allows a remote attacker to execute arbitrary code via basic_title parameter.

8.8

CVE-2022-47042

Exploit
  • EPSS 0.34%
  • Veröffentlicht 26.01.2023 21:18:02
  • Zuletzt bearbeitet 02.04.2025 16:15:22

MCMS v5.2.10 and below was discovered to contain an arbitrary file write vulnerability via the component ms/template/writeFileContent.do.

5.4

CVE-2022-4640

Exploit
  • EPSS 0.18%
  • Veröffentlicht 21.12.2022 22:15:08
  • Zuletzt bearbeitet 21.11.2024 07:35:39

A vulnerability has been found in Mingsoft MCMS 5.2.9 and classified as problematic. Affected by this vulnerability is the function save of the component Article Handler. The manipulation leads to cross site scripting. The attack can be launched remo...

9.8

CVE-2022-4375

Exploit
  • EPSS 20.37%
  • Veröffentlicht 09.12.2022 08:15:09
  • Zuletzt bearbeitet 21.11.2024 07:35:09

A vulnerability was found in Mingsoft MCMS up to 5.2.9. It has been classified as critical. Affected is an unknown function of the file /cms/category/list. The manipulation of the argument sqlWhere leads to sql injection. It is possible to launch the...

6.1

CVE-2022-4350

Exploit
  • EPSS 0.18%
  • Veröffentlicht 08.12.2022 10:15:11
  • Zuletzt bearbeitet 21.11.2024 07:35:06

A vulnerability, which was classified as problematic, was found in Mingsoft MCMS 5.2.8. Affected is an unknown function of the file search.do. The manipulation of the argument content_title leads to cross site scripting. It is possible to launch the ...

9.8

CVE-2022-36599

Exploit
  • EPSS 0.51%
  • Veröffentlicht 16.08.2022 13:15:11
  • Zuletzt bearbeitet 21.11.2024 07:13:22

Mingsoft MCMS 5.2.8 was discovered to contain a SQL injection vulnerability in /mdiy/model/delete URI via models Lists.

9.8

CVE-2022-36272

Exploit
  • EPSS 0.41%
  • Veröffentlicht 16.08.2022 13:15:11
  • Zuletzt bearbeitet 21.11.2024 07:12:41

Mingsoft MCMS 5.2.8 was discovered to contain a SQL injection vulnerability in /mdiy/page/verify URI via fieldName parameter.

9.8

CVE-2022-31943

Exploit
  • EPSS 0.49%
  • Veröffentlicht 01.07.2022 21:15:08
  • Zuletzt bearbeitet 21.11.2024 07:05:29

MCMS v5.2.8 was discovered to contain an arbitrary file upload vulnerability.

9.8

CVE-2022-30506

Exploit
  • EPSS 2.65%
  • Veröffentlicht 02.06.2022 14:15:53
  • Zuletzt bearbeitet 21.11.2024 07:02:50

An arbitrary file upload vulnerability was discovered in MCMS 5.2.7, allowing an attacker to execute arbitrary code through a crafted ZIP file.