İçeriğe atla
Noroxi

MingSoft kayıtları

mingsoft üreticisine ait 48 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
16
Düzeltme kaydı olan
%22,9
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 21
  3. 22
  4. 23
  5. 24
  6. 25
  7. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

48 kayıt
  • CVE-2022-22930
    46Planlayın

    A remote code execution (RCE) vulnerability in the Template Management function of MCMS v5.2.4 allows attackers to execute arbitrary code vi

    KritikCVSS 9,8İstismar yokEPSS %24

    mingsoft · mcms20 Oca 2022

  • CVE-2022-23898
    41Planlayın

    MCMS v5.2.5 was discovered to contain a SQL injection vulnerability via the categoryId parameter in the file IContentDao.xml.

    KritikCVSS 9,8Kavram kanıtıEPSS %8

    mingsoft · mcms3 Mar 2022

  • CVE-2022-25125
    41Planlayın

    MCMS v5.2.4 was discovered to contain a SQL injection vulnerability via search.do in the file /mdiy/dict/listExcludeApp.

    KritikCVSS 9,8Kavram kanıtıEPSS %7

    mingsoft · mcms3 Mar 2022

  • CVE-2022-26585
    41Planlayın

    Mingsoft MCMS v5.2.7 was discovered to contain a SQL injection vulnerability via /cms/content/list.

    KritikCVSS 9,8Kavram kanıtıEPSS %5

    mingsoft · mcms4 Nis 2022

  • CVE-2024-22567
    40Planlayın

    File Upload vulnerability in MCMS 5.3.5 allows attackers to upload arbitrary files via crafted POST request to /ms/file/upload.do.

    YüksekCVSS 8,8İstismar yokEPSS %18

    mingsoft · mcms5 Şub 2024

  • CVE-2021-46036
    40Planlayın

    An arbitrary file upload vulnerability in the component /ms/file/uploadTemplate.do of MCMS v5.2.4 allows attackers to execute arbitrary code

    KritikCVSS 9,8İstismar yokEPSS %4

    mingsoft · mcms18 Şub 2022

  • CVE-2021-46386
    40Planlayın

    File upload vulnerability in mingSoft MCMS through 5.2.5, allows remote attackers to execute arbitrary code via a crafted jspx webshell to n

    KritikCVSS 9,8İstismar yokEPSS %3

    mingsoft · mcms26 Oca 2022

  • CVE-2022-4375
    40Planlayın

    Mingsoft MCMS list sql injection

    KritikCVSS 9,8Kavram kanıtıEPSS %3

    mingsoft · mcms9 Ara 2022

  • CVE-2022-22929
    40Planlayın

    MCMS v5.2.4 was discovered to have an arbitrary file upload vulnerability in the New Template module, which allows attackers to execute arbi

    KritikCVSS 9,8İstismar yokEPSS %3

    mingsoft · mcms20 Oca 2022

  • CVE-2022-30506
    40Planlayın

    An arbitrary file upload vulnerability was discovered in MCMS 5.2.7, allowing an attacker to execute arbitrary code through a crafted ZIP fi

    KritikCVSS 9,8İstismar yokEPSS %3

    mingsoft · mcms2 Haz 2022

  • CVE-2022-22928
    40Planlayın

    MCMS v5.2.4 was discovered to have a hardcoded shiro-key, allowing attackers to exploit the key and execute arbitrary code.

    KritikCVSS 9,8İstismar yokEPSS %3

    mingsoft · mcms20 Oca 2022

  • CVE-2023-50578
    40Planlayın

    Mingsoft MCMS v5.2.9 was discovered to contain a SQL injection vulnerability via the categoryType parameter at /content/list.do.

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    mingsoft · mcms30 Ara 2023

  • CVE-2021-46384
    40Planlayın

    https://gitee.com/mingSoft/MCMS MCMS <=5.2.5 is affected by: RCE.

    KritikCVSS 9,8İstismar yokEPSS %2

    mingsoft · mcms4 Mar 2022

  • CVE-2022-23315
    40Planlayın

    MCMS v5.2.4 was discovered to contain an arbitrary file upload vulnerability via the component /ms/template/writeFileContent.do.

    KritikCVSS 9,8İstismar yokEPSS %2

    mingsoft · mcms20 Oca 2022

  • CVE-2022-27466
    39İzleyin

    MCMS v5.2.27 was discovered to contain a SQL injection vulnerability in the orderBy parameter at /dict/list.do.

    KritikCVSS 9,8İstismar yokEPSS %2

    mingsoft · mcms2 May 2022

  • CVE-2022-23314
    39İzleyin

    MCMS v5.2.4 was discovered to contain a SQL injection vulnerability via /ms/mdiy/model/importJson.do.

    KritikCVSS 9,8İstismar yokEPSS %2

    mingsoft · mcms20 Oca 2022

  • CVE-2022-31943
    39İzleyin

    MCMS v5.2.8 was discovered to contain an arbitrary file upload vulnerability.

    KritikCVSS 9,8İstismar yokEPSS %2

    mingsoft · mcms1 Tem 2022

  • CVE-2022-30047
    39İzleyin

    Mingsoft MCMS v5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/listExcludeApp URI via orderBy parameter.

    KritikCVSS 9,8İstismar yokEPSS %1

    mingsoft · mcms11 May 2022

  • CVE-2022-30048
    39İzleyin

    Mingsoft MCMS 5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/list URI via orderBy parameter.

    KritikCVSS 9,8İstismar yokEPSS %1

    mingsoft · mcms11 May 2022

  • CVE-2020-20913
    39İzleyin

    SQL Injection vulnerability found in Ming-Soft MCMS v.4.7.2 allows a remote attacker to execute arbitrary code via basic_title parameter.

    KritikCVSS 9,8İstismar yokEPSS %1

    mingsoft · mcms4 Nis 2023

  • CVE-2021-44868
    39İzleyin

    A problem was found in ming-soft MCMS v5.1.

    KritikCVSS 9,8İstismar yokEPSS %1

    mingsoft · mcms17 Şub 2022

  • CVE-2018-18830
    39İzleyin

    An issue was discovered in com\mingsoft\basic\action\web\FileAction.java in MCMS 4.6.5.

    KritikCVSS 9,8İstismar yokEPSS %1

    mingsoft · mcms30 Eki 2018

  • CVE-2020-23262
    39İzleyin

    An issue was discovered in ming-soft MCMS v5.0, where a malicious user can exploit SQL injection without logging in through /mcms/view.do.

    KritikCVSS 9,8İstismar yokEPSS %1

    mingsoft · mcms26 Oca 2021

  • CVE-2022-36272
    39İzleyin

    Mingsoft MCMS 5.2.8 was discovered to contain a SQL injection vulnerability in /mdiy/page/verify URI via fieldName parameter.

    KritikCVSS 9,8İstismar yokEPSS %1

    mingsoft · mcms16 Ağu 2022

  • CVE-2022-36599
    39İzleyin

    Mingsoft MCMS 5.2.8 was discovered to contain a SQL injection vulnerability in /mdiy/model/delete URI via models Lists.

    KritikCVSS 9,8İstismar yokEPSS %1

    mingsoft · mcms16 Ağu 2022