Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-25428 EUVD-2024-22757GHSA-qxvg-pp92-xq57

SQL Injection vulnerability in MRCMS v3.1.2 allows attackers to run arbitrary system commands via the status parameter.

Published Feb 20, 2024 · Updated Mar 13, 2025 · Assigned by mitre