Browse CVEs

HIGH 7.2 CVE-2026-2666 A flaw has been found in mingSoft MCMS 6.1.1. The affected element is an unknown function of the file /ms/file/uploadTemplate.do of the component Tem… Mcms No fix yet Fix from $1,9502026-02-18 MEDIUM 6.1 CVE-2025-60837 A reflected cross-site scripting (XSS) vulnerability in MCMS v6.0.1 allows attackers to execute arbitrary Javascript in the context of a user's brows… Mcms after 6.0.1 Fix from $1,6002025-10-23 CRITICAL 9.8 CVE-2025-56316 A SQL injection vulnerability in the content_title parameter of the /cms/content/list endpoint in MCMS 5.5.0 allows remote attackers to execute arbit… Mcms Mitigation only Fix from $2,3002025-10-17 MEDIUM 6.5 CVE-2025-60838 An arbitrary file upload vulnerability in MCMS v6.0.1 allows attackers to execute arbitrary code via uploading a crafted file. Mcms after 6.0.1 Fix from $1,6002025-10-10 CRITICAL 9.8 CVE-2025-29287 An arbitrary file upload vulnerability in the ueditor component of MCMS v5.4.3 allows attackers to execute arbitrary code via uploading a crafted fil… Mcms No fix yet Fix from $2,3002025-04-21 HIGH 8.1 CVE-2024-42991 MCMS v5.4.1 has front-end file upload vulnerability which can lead to remote command execution. Mcms No fix yet Fix from $1,9502024-09-03 HIGH 8.8 CVE-2024-22567EPSS 18% File Upload vulnerability in MCMS 5.3.5 allows attackers to upload arbitrary files via crafted POST request to /ms/file/upload.do. Mcms No fix yet Fix from $1,9502024-02-05 HIGH 7.5 CVE-2023-51282 An issue in mingSoft MCMS v.5.2.4 allows a a remote attacker to obtain sensitive information via a crafted script to the password parameter. Mcms No fix yet Fix from $1,9502024-01-16 CRITICAL 9.8 CVE-2023-50578 Mingsoft MCMS v5.2.9 was discovered to contain a SQL injection vulnerability via the categoryType parameter at /content/list.do. Mcms No fix yet Fix from $2,3002023-12-30 MEDIUM 6.1 CVE-2023-3990 A vulnerability classified as problematic has been found in Mingsoft MCMS up to 5.3.1. This affects an unknown part of the file search.do of the comp… Mcms after 5.3.1 Fix from $1,6002023-07-28 HIGH 8.8 CVE-2020-22755 File upload vulnerability in MCMS 5.0 allows attackers to execute arbitrary code via a crafted thumbnail. A different vulnerability than CVE-2022-319… Mcms No fix yet Fix from $1,9502023-05-08 CRITICAL 9.8 CVE-2020-20913 SQL Injection vulnerability found in Ming-Soft MCMS v.4.7.2 allows a remote attacker to execute arbitrary code via basic_title parameter. Mcms No fix yet Fix from $2,3002023-04-04 HIGH 8.8 CVE-2022-47042 MCMS v5.2.10 and below was discovered to contain an arbitrary file write vulnerability via the component ms/template/writeFileContent.do. Mcms No fix yet Fix from $1,9502023-01-26 MEDIUM 5.4 CVE-2022-4640 A vulnerability has been found in Mingsoft MCMS 5.2.9 and classified as problematic. Affected by this vulnerability is the function save of the compo… Mcms No fix yet Fix from $1,6002022-12-21 CRITICAL 9.8 CVE-2022-4375 A vulnerability was found in Mingsoft MCMS up to 5.2.9. It has been classified as critical. Affected is an unknown function of the file /cms/category… Mcms 5.2.10+ Fix from $2,3002022-12-09 MEDIUM 6.1 CVE-2022-4350 A vulnerability, which was classified as problematic, was found in Mingsoft MCMS 5.2.8. Affected is an unknown function of the file search.do. The ma… Mcms No fix yet Fix from $1,6002022-12-08 CRITICAL 9.8 CVE-2022-36272 Mingsoft MCMS 5.2.8 was discovered to contain a SQL injection vulnerability in /mdiy/page/verify URI via fieldName parameter. Mcms No fix yet Fix from $2,3002022-08-16 CRITICAL 9.8 CVE-2022-36599 Mingsoft MCMS 5.2.8 was discovered to contain a SQL injection vulnerability in /mdiy/model/delete URI via models Lists. Mcms No fix yet Fix from $2,3002022-08-16 CRITICAL 9.8 CVE-2022-31943 MCMS v5.2.8 was discovered to contain an arbitrary file upload vulnerability. Mcms No fix yet Fix from $2,3002022-07-01 CRITICAL 9.8 CVE-2022-30506 An arbitrary file upload vulnerability was discovered in MCMS 5.2.7, allowing an attacker to execute arbitrary code through a crafted ZIP file. Mcms No fix yet Fix from $2,3002022-06-02 HIGH 8.8 CVE-2022-29647 An issue was discovered in MCMS 5.2.7. There is a CSRF vulnerability that can add an administrator account via ms/basic/manager/save.do. Mcms No fix yet Fix from $1,9502022-06-02 CRITICAL 9.8 CVE-2022-30047 Mingsoft MCMS v5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/listExcludeApp URI via orderBy parameter. Mcms No fix yet Fix from $2,3002022-05-11 CRITICAL 9.8 CVE-2022-30048 Mingsoft MCMS 5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/list URI via orderBy parameter. Mcms No fix yet Fix from $2,3002022-05-11 CRITICAL 9.8 CVE-2022-27466 MCMS v5.2.27 was discovered to contain a SQL injection vulnerability in the orderBy parameter at /dict/list.do. Mcms No fix yet Fix from $2,3002022-05-02 HIGH 8.8 CVE-2022-27340 MCMS v5.2.7 contains a Cross-Site Request Forgery (CSRF) via /role/saveOrUpdateRole.do. This vulnerability allows attackers to escalate privileges an… Mcms No fix yet Fix from $1,9502022-04-22 CRITICAL 9.8 CVE-2022-26585EPSS 6% Mingsoft MCMS v5.2.7 was discovered to contain a SQL injection vulnerability via /cms/content/list. Mcms No fix yet Fix from $2,3002022-04-05 CRITICAL 9.8 CVE-2021-46384 https://gitee.com/mingSoft/MCMS MCMS <=5.2.5 is affected by: RCE. The impact is: execute arbitrary code (remote). The attack vector is: ${"freemarker… Mcms after 5.2.5 Fix from $2,3002022-03-04 CRITICAL 9.8 CVE-2022-23898EPSS 8% MCMS v5.2.5 was discovered to contain a SQL injection vulnerability via the categoryId parameter in the file IContentDao.xml. Mcms No fix yet Fix from $2,3002022-03-03 CRITICAL 9.8 CVE-2022-23899 MCMS v5.2.5 was discovered to contain a SQL injection vulnerability via search.do in the file /web/MCmsAction.java. Mcms No fix yet Fix from $2,3002022-03-03 CRITICAL 9.8 CVE-2022-25125EPSS 7% MCMS v5.2.4 was discovered to contain a SQL injection vulnerability via search.do in the file /mdiy/dict/listExcludeApp. Mcms No fix yet Fix from $2,3002022-03-03