Skip to content
OpenAdvisories

Package · Maven

net.mingsoft:ms-mcms

39 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • High 8.8
    CVE-2024-22567 EPSS 18%

    mingSoft MCMS File Upload vulnerability

    File Upload vulnerability in MCMS 5.3.5 allows attackers to upload arbitrary files via crafted POST request to /ms/file/upload.do.

    net.mingsoft:ms-mcms Maven
  • High 7.5
    CVE-2023-51282

    Code injection in mingSoft MCMS

    An issue in mingSoft MCMS v.5.2.4 allows a a remote attacker to obtain sensitive information via a crafted script to the password parameter.

    net.mingsoft:ms-mcms Maven
  • High 8.8
    CVE-2020-22755

    MCMS vulnerable to arbitrary code execution via crafted thumbnail

    File upload vulnerability in MCMS 5.0 allows attackers to execute arbitrary code via a crafted thumbnail. A different vulnerability than CVE-2022-31943.

    net.mingsoft:ms-mcms Maven
  • High 8.8
    CVE-2022-47042

    Arbitrary file write in net.mingsoft:ms-mcms

    MCMS v5.2.10 and below was discovered to contain an arbitrary file write vulnerability via the component ms/template/writeFileContent.do.

    net.mingsoft:ms-mcms Maven
  • High 8.8
    CVE-2022-29647

    Cross Site Request Forgery in Mingsoft MCMS

    An issue was discovered in MCMS 5.2.7. There is a CSRF vulnerability that can add an administrator account via ms/basic/manager/save.do.

    net.mingsoft:ms-mcms Maven
  • High 8.8
    CVE-2022-27340

    Cross Site Request Forgery in Mingsoft MCMS

    MCMS v5.2.7 contains a Cross-Site Request Forgery (CSRF) via /role/saveOrUpdateRole.do. This vulnerability allows attackers to escalate privileges and modify data.

    net.mingsoft:ms-mcms Maven
  • High —
    CVE-2022-26585 Scanner template

    SQL injection in net.mingsoft:ms-mcms

    Mingsoft MCMS v5.2.7 was discovered to contain a SQL injection vulnerability via /cms/content/list.

    net.mingsoft:ms-mcms Maven
  • High 7.1
    CVE-2021-46062

    MCMS Arbitrary File Deletion vulnerability

    MCMS v5.2.5 was discovered to contain an arbitrary file deletion vulnerability via the component oldFileName.

    net.mingsoft:ms-mcms net.mingsoft:ms-basic Maven
  • High 8.1
    CVE-2021-46037

    Path traversal in MCMS

    MCMS v5.2.4 was discovered to contain an arbitrary file deletion vulnerability via the component /template/unzip.do.

    net.mingsoft:ms-mcms Maven
  • High 7.5
    CVE-2021-46385

    Mingsoft MCMS SQL injection vulnerability

    https://gitee.com/mingSoft/MCMS MCMS <=5.2.5 is affected by: SQL Injection. The impact is: obtain sensitive information (remote). The component is: net.mingsoft.mdiy.action.FormDataAction#queryData. The attack vector is: 0 or sleep(3). ¶¶ MCMS has a sql injec…

    net.mingsoft:ms-mcms Maven
  • High 7.5
    CVE-2021-46383

    Mingsoft MCMS SQL injection vulnerability

    https://gitee.com/mingSoft/MCMS MCMS <=5.2.5 is affected by: SQL Injection. The impact is: obtain sensitive information (remote). The component is: net.mingsoft.mdiy.action.web.DictAction#list. The attack vector is: 0 or sleep(3). ¶¶ MCMS has a sql injection …

    net.mingsoft:ms-mcms Maven
  • High 7.5
    CVE-2018-18831

    Path Traversal in minsoft:ms-mcms

    An issue was discovered in com\mingsoft\cms\action\GeneraterAction.java in MCMS 4.6.5. An attacker can write a .jsp file (in the position parameter) to an arbitrary directory via a ../ Directory Traversal in the url parameter.

    net.mingsoft:ms-mcms Maven
  • High 8.8
    CVE-2018-17366

    Mingsoft MCMS CSRF vulnerability

    An issue was discovered in MCMS 4.6.5. There is a CSRF vulnerability that can add an administrator account via ms/basic/manager/save.do.

    net.mingsoft:ms-mcms Maven