SQL injection in net.mingsoft:ms-mcms · CVE-2022-26585 · GitHub Advisory Database · GitHub

SQL injection in net.mingsoft:ms-mcms

High severity GitHub Reviewed Published Apr 6, 2022 to the GitHub Advisory Database • Updated Jan 27, 2023

Package

net.mingsoft:ms-mcms (Maven)

Affected versions

<= 5.2.7

Patched versions

None

Description

Mingsoft MCMS v5.2.7 was discovered to contain a SQL injection vulnerability via /cms/content/list.

References

Published by the National Vulnerability Database

Apr 5, 2022

Published to the GitHub Advisory Database Apr 6, 2022

Reviewed Apr 7, 2022

Last updated Jan 27, 2023