Browse CVEs

CRITICAL 9.1 CVE-2021-46063 MCMS v5.2.5 was discovered to contain a Server Side Template Injection (SSTI) vulnerability via the Template Management module. Mcms No fix yet Fix from $2,3002022-02-18 HIGH 7.1 CVE-2021-46062 MCMS v5.2.5 was discovered to contain an arbitrary file deletion vulnerability via the component oldFileName. Mcms No fix yet Fix from $1,9502022-02-18 HIGH 8.1 CVE-2021-46037 MCMS v5.2.4 was discovered to contain an arbitrary file deletion vulnerability via the component /template/unzip.do. Mcms No fix yet Fix from $1,9502022-02-18 CRITICAL 9.8 CVE-2021-46036 An arbitrary file upload vulnerability in the component /ms/file/uploadTemplate.do of MCMS v5.2.4 allows attackers to execute arbitrary code. Mcms No fix yet Fix from $2,3002022-02-18 CRITICAL 9.8 CVE-2021-44868 A problem was found in ming-soft MCMS v5.1. There is a sql injection vulnerability in /ms/cms/content/list.do Mcms No fix yet Fix from $2,3002022-02-17 HIGH 7.5 CVE-2021-46385 https://gitee.com/mingSoft/MCMS MCMS <=5.2.5 is affected by: SQL Injection. The impact is: obtain sensitive information (remote). The component is: n… Mcms after 5.2.5 Fix from $1,9502022-01-26 CRITICAL 9.8 CVE-2021-46386 File upload vulnerability in mingSoft MCMS through 5.2.5, allows remote attackers to execute arbitrary code via a crafted jspx webshell to net.mingso… Mcms after 5.2.5 Fix from $2,3002022-01-26 HIGH 7.5 CVE-2021-46383 https://gitee.com/mingSoft/MCMS MCMS <=5.2.5 is affected by: SQL Injection. The impact is: obtain sensitive information (remote). The component is: n… Mcms after 5.2.5 Fix from $1,9502022-01-26 CRITICAL 9.8 CVE-2022-22930EPSS 24% A remote code execution (RCE) vulnerability in the Template Management function of MCMS v5.2.4 allows attackers to execute arbitrary code via a craft… Mcms No fix yet Fix from $2,3002022-01-21 CRITICAL 9.8 CVE-2022-23314 MCMS v5.2.4 was discovered to contain a SQL injection vulnerability via /ms/mdiy/model/importJson.do. Mcms No fix yet Fix from $2,3002022-01-21 CRITICAL 9.8 CVE-2022-23315 MCMS v5.2.4 was discovered to contain an arbitrary file upload vulnerability via the component /ms/template/writeFileContent.do. Mcms No fix yet Fix from $2,3002022-01-21 CRITICAL 9.8 CVE-2022-22928 MCMS v5.2.4 was discovered to have a hardcoded shiro-key, allowing attackers to exploit the key and execute arbitrary code. Mcms No fix yet Fix from $2,3002022-01-21 CRITICAL 9.8 CVE-2022-22929 MCMS v5.2.4 was discovered to have an arbitrary file upload vulnerability in the New Template module, which allows attackers to execute arbitrary cod… Mcms No fix yet Fix from $2,3002022-01-21 CRITICAL 9.8 CVE-2020-23262 An issue was discovered in ming-soft MCMS v5.0, where a malicious user can exploit SQL injection without logging in through /mcms/view.do. Mcms No fix yet Fix from $2,3002021-01-26 CRITICAL 9.8 CVE-2018-18830 An issue was discovered in com\mingsoft\basic\action\web\FileAction.java in MCMS 4.6.5. Since the upload interface does not verify the user login sta… Mcms Mitigation only Fix from $2,3002018-10-30 HIGH 7.5 CVE-2018-18831 An issue was discovered in com\mingsoft\cms\action\GeneraterAction.java in MCMS 4.6.5. An attacker can write a .jsp file (in the position parameter) … Mcms Mitigation only Fix from $1,9502018-10-30 HIGH 8.8 CVE-2018-17366 An issue was discovered in MCMS 4.6.5. There is a CSRF vulnerability that can add an administrator account via ms/basic/manager/save.do. Mcms Mitigation only Fix from $1,9502018-09-23