Description

A problem was found in ming-soft MCMS v5.1. There is a sql injection vulnerability in /ms/cms/content/list.do

Remediation

References

https://github.com/ming-soft/MCMS/issues/58

Related Vulnerabilities

CVE-2020-8141 Vulnerability in maven package org.webjars.bowergithub.olado:dot

CVE-2020-26302 Vulnerability in maven package org.webjars.bower:is_js

CVE-2020-35217 Vulnerability in maven package io.vertx:vertx-web

CVE-2020-8116 Vulnerability in maven package org.webjars.npm:dot-prop

CVE-2021-21306 Vulnerability in npm package marked

Severity

Critical

Classification

CWE-89 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Exploit Issue Tracking Third Party Advisory