Description

Mingsoft MCMS 5.2.8 was discovered to contain a SQL injection vulnerability in /mdiy/model/delete URI via models Lists.

Remediation

References

https://gitee.com/mingSoft/MCMS/issues/I5I1P5

Related Vulnerabilities

CVE-2021-43838 Vulnerability in npm package jsx-slack

CVE-2022-24999 Vulnerability in npm package express

CVE-2021-32013 Vulnerability in npm package xlsx

CVE-2021-23449 Vulnerability in npm package vm2

CVE-2020-7645 Vulnerability in npm package chrome-launcher

Severity

Critical

Classification

CWE-89 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Exploit Issue Tracking Third Party Advisory