MKCMS V6.2 has SQL injection via the /ucenter/repass.php name parameter.

Published Nov 3, 2022 · Updated May 5, 2025 · Assigned by mitre