Mingsoft Mcms vulnerabilities

• mingsoft mcms MingSoft MCMS ms-mdiy get information disclosure CVE-2026-19357 6.9 MediumAugust 9, 2026
• mingsoft mcms MingSoft MCMS ms-mdiy list information disclosure CVE-2026-19356 6.9 MediumAugust 9, 2026
• mingsoft mcms MingSoft MCMS ms-mdiy list.do ModelDataImpl.queryDiyFormData sql injection CVE-2026-19355 6.9 MediumAugust 9, 2026
• mingsoft mcms mingSoft MCMS Web Content List Endpoint ContentAction.java list sql injection CVE-2026-4954 5.3 MediumMarch 27, 2026
• mingsoft mcms mingSoft MCMS Editor Endpoint BaseAction.java catchImage server-side request forgery CVE-2026-4953 6.9 MediumMarch 27, 2026
• mingsoft mcms mingSoft MCMS Template Archive uploadTemplate.do unrestricted upload CVE-2026-2666 5.1 MediumFebruary 18, 2026
• mingsoft mcms MCMS reflected cross-site scripting (XSS) vulnerability CVE-2025-60837 6.1 MediumOctober 23, 2025
• mingsoft mcms MCMS vulnerable SQL injection via the content_title parameter CVE-2025-56316 Fix available 9.8 CriticalOctober 17, 2025
• mingsoft mcms An arbitrary file upload vulnerability in MCMS v6.0.1 allows attackers to execute arbitrary code... CVE-2025-60838 6.5 MediumOctober 10, 2025
• mingsoft mcms MCMS allows arbitrary file uploads in the ueditor component CVE-2025-29287 Fix available 9.8 CriticalApril 21, 2025
• mingsoft mcms MCMS v5.4.1 has front-end file upload vulnerability which can lead to remote command execution. CVE-2024-42991 8.1 HighSeptember 3, 2024
• mingsoft mcms mingSoft MCMS File Upload vulnerability CVE-2024-22567 EPSS 17.8% 8.8 HighFebruary 5, 2024
• mingsoft mcms Code injection in mingSoft MCMS CVE-2023-51282 7.5 HighJanuary 16, 2024
• mingsoft mcms Mingsoft MCMS SQL injection CVE-2023-50578 9.8 CriticalDecember 30, 2023
• mingsoft mcms Mingsoft MCMS HTTP POST Request search.do cross site scripting CVE-2023-3990 Fix available 3.5 LowJuly 28, 2023
• mingsoft mcms MCMS vulnerable to arbitrary code execution via crafted thumbnail CVE-2020-22755 8.8 HighMay 8, 2023
• mingsoft mcms Ming-Soft MCMS vulnerable to SQL injection CVE-2020-20913 Fix available 9.8 CriticalApril 4, 2023
• mingsoft mcms Arbitrary file write in net.mingsoft:ms-mcms CVE-2022-47042 Fix available 8.8 HighJanuary 24, 2023
• mingsoft mcms Mingsoft MCMS Article save cross site scripting CVE-2022-4640 3.5 LowDecember 21, 2022
• mingsoft mcms Mingsoft MCMS list sql injection CVE-2022-4375 Fix available 6.3 MediumDecember 9, 2022
• mingsoft mcms Mingsoft MCMS search.do cross site scripting CVE-2022-4350 3.5 LowDecember 8, 2022
• mingsoft mcms Mingsoft MCMS SQL injection vulnerability in /mdiy/model/delete URI via models List CVE-2022-36599 9.8 CriticalAugust 16, 2022
• mingsoft mcms Mingsoft MCMS SQL injection vulnerability in /mdiy/page/verify URI via fieldName parameter CVE-2022-36272 9.8 CriticalAugust 16, 2022
• mingsoft mcms Unrestricted Upload of File with Dangerous Type in MCMS CVE-2022-31943 9.8 CriticalJuly 1, 2022
• mingsoft mcms Cross Site Request Forgery in Mingsoft MCMS CVE-2022-29647 8.8 HighMay 31, 2022
• mingsoft mcms Code injection in MCMS CVE-2022-30506 9.8 CriticalMay 27, 2022
• mingsoft mcms Mingsoft MCMS 5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/list... CVE-2022-30048 9.8 CriticalMay 11, 2022
• mingsoft mcms Mingsoft MCMS v5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict... CVE-2022-30047 9.8 CriticalMay 11, 2022
• mingsoft mcms MCMS v5.2.27 was discovered to contain a SQL injection vulnerability in the orderBy parameter at ... CVE-2022-27466 9.8 CriticalMay 2, 2022
• mingsoft mcms Cross Site Request Forgery in Mingsoft MCMS CVE-2022-27340 8.8 HighApril 22, 2022
• mingsoft mcms SQL injection in net.mingsoft:ms-mcms CVE-2022-26585 9.8 CriticalApril 5, 2022
• mingsoft mcms Remote code execution in net.mingsoft:ms-mcms CVE-2021-46384 Fix available 9.8 CriticalMarch 4, 2022
• mingsoft mcms MCMS v5.2.4 was discovered to contain a SQL injection vulnerability via search.do in the file ... CVE-2022-25125 9.8 CriticalMarch 3, 2022
• mingsoft mcms SQL injection in net.mingsoft:ms-mcms CVE-2022-23899 9.8 CriticalMarch 3, 2022
• mingsoft mcms SQL injection in net.mingsoft:ms-mcms CVE-2022-23898 9.8 CriticalMarch 3, 2022
• mingsoft mcms Server Side Template Injection in MCMS CVE-2021-46063 9.1 CriticalFebruary 18, 2022
• mingsoft mcms MCMS Arbitrary File Deletion vulnerability CVE-2021-46062 Fix available 7.1 HighFebruary 18, 2022
• mingsoft mcms Path traversal in MCMS CVE-2021-46037 8.1 HighFebruary 18, 2022
• mingsoft mcms File upload leading to RCE in MCMS CVE-2021-46036 9.8 CriticalFebruary 18, 2022
• mingsoft mcms SQL injection in MCMS CVE-2021-44868 9.8 CriticalFebruary 17, 2022
• mingsoft mcms Mingsoft MCMS SQL injection vulnerability CVE-2021-46385 7.5 HighJanuary 26, 2022
• mingsoft mcms Mingsoft MCMS SQL injection vulnerability CVE-2021-46383 Fix available 7.5 HighJanuary 26, 2022
• mingsoft mcms Mingsoft MCMS vulnerable to Remote Code Execution via file upload. CVE-2021-46386 9.8 CriticalJanuary 26, 2022
• mingsoft mcms RCE in Mingsoft MCMS CVE-2022-22930 Fix available EPSS 23.7% 9.8 CriticalJanuary 20, 2022
• mingsoft mcms Arbitrary file upload in Mingsoft MCMS CVE-2022-23315 9.8 CriticalJanuary 20, 2022
• mingsoft mcms MCMS v5.2.4 was discovered to contain a SQL injection vulnerability via /ms/mdiy/model/importJson... CVE-2022-23314 9.8 CriticalJanuary 20, 2022
• mingsoft mcms Arbitrary File Upload in Mingsoft MCMS CVE-2022-22929 9.8 CriticalJanuary 20, 2022
• mingsoft mcms MCMS v5.2.4 was discovered to have a hardcoded shiro-key, allowing attackers to exploit the key... CVE-2022-22928 9.8 CriticalJanuary 20, 2022
• mingsoft mcms SQL injection without credentials in ming-soft MCMS CVE-2020-23262 Fix available 9.8 CriticalJanuary 22, 2021
• mingsoft mcms Path Traversal in minsoft:ms-mcms CVE-2018-18831 7.5 HighOctober 30, 2018
• Show olderLoading…