Critical · 9.8 CVE-2022-36272 EUVD-2022-6568GHSA-hmj3-mqgw-2fq6

Mingsoft MCMS SQL injection vulnerability in /mdiy/page/verify URI via fieldName parameter

Published Aug 16, 2022 · Updated Aug 3, 2024 · Assigned by mitre

Description

Mingsoft MCMS 5.2.8 was discovered to contain a SQL injection vulnerability in /mdiy/page/verify URI via fieldName parameter.

Ecosystem	Package	Affected	Fixed	Record
Maven	net.mingsoft:ms-mcms	<= 5.2.8	—	GHSA-hmj3-mqgw-2fq6