Description
An issue was discovered in ming-soft MCMS v5.0, where a malicious user can exploit SQL injection without logging in through /mcms/view.do.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | net.mingsoft:ms-mcms | < 5.1 | 5.1 | GHSA-h3hw-g4hm-7gr4 |