VendorsMingsoftmcms5.2.8
Vulnerabilities

Mingsoft Mcms 5.2.8

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

5CVEs
CVE-2022-31943
MCMS v5.2.8 was discovered to contain an arbitrary file upload vulnerability.
Published 2022-07-01 · Modified
9.8EPSS 0.015
CVE-2022-36272
Mingsoft MCMS 5.2.8 was discovered to contain a SQL injection vulnerability in /mdiy/page/verify URI via fieldName parameter.
Published 2022-08-16 · Modified
9.8EPSS 0.011
CVE-2022-36599
Mingsoft MCMS 5.2.8 was discovered to contain a SQL injection vulnerability in /mdiy/model/delete URI via models Lists.
Published 2022-08-16 · Modified
9.8EPSS 0.011
CVE-2022-47042
MCMS v5.2.10 and below was discovered to contain an arbitrary file write vulnerability via the component ms/template/writeFileContent.do.
Published 2023-01-24 · Modified
8.8EPSS 0.010
CVE-2022-4350
Mingsoft MCMS search.do cross site scripting
Published 2022-12-08 · Modified
6.1EPSS 0.004