MKCMS V5.0 has SQL injection via the bplay.php play parameter.

Published Apr 2, 2019 · Updated Aug 4, 2024 · Assigned by mitre