Description
An issue was discovered in ming-soft MCMS v5.0, where a malicious user can exploit SQL injection without logging in through /mcms/view.do.
Remediation
References
https://github.com/ming-soft/MCMS/issues/45
Related Vulnerabilities
CVE-2023-26122 Vulnerability in npm package safe-eval
CVE-2021-25913 Vulnerability in npm package set-or-get
CVE-2022-25851 Vulnerability in maven package org.webjars.npm:jpeg-js
CVE-2021-37533 Vulnerability in maven package commons-net:commons-net
CVE-2022-1291 Vulnerability in maven package org.webjars.bowergithub.hhurz:tableexport.jquery.plugin