MCMS v5.2.27 was discovered to contain a SQL injection vulnerability in the orderBy parameter at /dict/list.do.

Published May 2, 2022 · Updated Aug 3, 2024 · Assigned by mitre