MCMS v5.2.4 exists to contain a SQL injection vulnerability via /ms/mdiy/model/importJson.do.
mingsoft mcms 5.2.4