Skip to content
Noroxi

mkcms project records

6 published records for vendor mkcms project.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 19
  2. 22

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

6 records
  • CVE-2019-10707
    39Monitor

    MKCMS V5.0 has SQL injection via the bplay.php play parameter.

    CriticalCVSS 9.8No exploitEPSS 1%

    mkcms project · mkcmsApr 2, 2019

  • CVE-2020-22818
    39Monitor

    MKCMS V6.2 has SQL injection via /ucenter/reg.php name parameter.

    CriticalCVSS 9.8No exploitEPSS 0%

    mkcms project · mkcmsNov 3, 2022

  • CVE-2020-22819
    39Monitor

    MKCMS V6.2 has SQL injection via the /ucenter/active.php verify parameter.

    CriticalCVSS 9.8No exploitEPSS 0%

    mkcms project · mkcmsNov 3, 2022

  • CVE-2020-22820
    39Monitor

    MKCMS V6.2 has SQL injection via the /ucenter/repass.php name parameter.

    CriticalCVSS 9.8No exploitEPSS 0%

    mkcms project · mkcmsNov 3, 2022

  • CVE-2019-11332
    36Monitor

    MKCMS 5.0 allows remote attackers to take over arbitrary user accounts by posting a username and e-mail address to ucenter/repass.php, which

    HighCVSS 8.8No exploitEPSS 1%

    mkcms project · mkcmsApr 18, 2019

  • CVE-2019-11078
    35Monitor

    MKCMS V5.0 has a CSRF vulnerability to add a new admin user via the ucenter/userinfo.php URI.

    HighCVSS 8.8No exploitEPSS 0%

    mkcms project · mkcmsApr 10, 2019