Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
mingsoft mcms 5.2.4 vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2023-51282
An issue in mingSoft MCMS v.5.2.4 allows a a remote malicious user to obtain sensitive information via a crafted script to the password parameter.
Mingsoft Mcms 5.2.4
668
VMScore
CVE-2022-25125
MCMS v5.2.4 exists to contain a SQL injection vulnerability via search.do in the file /mdiy/dict/listExcludeApp.
Mingsoft Mcms 5.2.4
668
VMScore
CVE-2021-46036
An arbitrary file upload vulnerability in the component /ms/file/uploadTemplate.do of MCMS v5.2.4 allows malicious users to execute arbitrary code.
Mingsoft Mcms 5.2.4
490
VMScore
CVE-2021-46037
MCMS v5.2.4 exists to contain an arbitrary file deletion vulnerability via the component /template/unzip.do.
Mingsoft Mcms 5.2.4
668
VMScore
CVE-2022-22928
MCMS v5.2.4 exists to have a hardcoded shiro-key, allowing malicious users to exploit the key and execute arbitrary code.
Mingsoft Mcms 5.2.4
668
VMScore
CVE-2022-22929
MCMS v5.2.4 exists to have an arbitrary file upload vulnerability in the New Template module, which allows malicious users to execute arbitrary code via a crafted ZIP file.
Mingsoft Mcms 5.2.4
668
VMScore
CVE-2022-22930
A remote code execution (RCE) vulnerability in the Template Management function of MCMS v5.2.4 allows malicious users to execute arbitrary code via a crafted payload.
Mingsoft Mcms 5.2.4
668
VMScore
CVE-2022-23314
MCMS v5.2.4 exists to contain a SQL injection vulnerability via /ms/mdiy/model/importJson.do.
Mingsoft Mcms 5.2.4
668
VMScore
CVE-2022-23315
MCMS v5.2.4 exists to contain an arbitrary file upload vulnerability via the component /ms/template/writeFileContent.do.
Mingsoft Mcms 5.2.4
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-49223
CVE-2024-0044
information disclosure
CVE-2024-35753
HTML injection
CVE-2024-21306
CVE-2024-35733
SQL injection
CVE-2024-35732
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started