Skip to content
OpenAdvisories
Critical · 9.8 Scanner template CVE-2023-50578 EUVD-2023-3088GHSA-3vvh-8c65-32j4

Mingsoft MCMS SQL injection

Published Dec 30, 2023 · Updated Sep 9, 2024 · Assigned by mitre

Description

Mingsoft MCMS v5.2.9 was discovered to contain a SQL injection vulnerability via the categoryType parameter at /content/list.do.

Automated scanner template

A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.

Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.

Affected packages

EcosystemPackageAffectedFixedRecord
Maven net.mingsoft:ms-mcms <= 5.2.9 — GHSA-3vvh-8c65-32j4

References