Description
An issue was discovered in ming-soft MCMS v5.0, where a malicious user can exploit SQL injection without logging in through /mcms/view.do.
Remediation
References
https://github.com/ming-soft/MCMS/issues/45
Related Vulnerabilities
CVE-2023-37899 Vulnerability in npm package @feathersjs/socketio
CVE-2022-45396 Vulnerability in maven package com.thalesgroup.hudson.plugins:sourcemonitor
CVE-2023-2972 Vulnerability in npm package @antfu/utils
CVE-2023-22894 Vulnerability in npm package @strapi/strapi
CVE-2022-41915 Vulnerability in maven package io.netty:netty-codec