exploitDog

GHSA-238j-48gj-wrjg

Опубликовано: 04 мар. 2022

Источник: github

Github: Не прошло ревью

CVSS3: 9.8

Описание

MCMS v5.2.4 was discovered to contain a SQL injection vulnerability via search.do in the file /mdiy/dict/listExcludeApp.

MCMS v5.2.4 was discovered to contain a SQL injection vulnerability via search.do in the file /mdiy/dict/listExcludeApp.

Ссылки

EPSS

Процентиль: 99%

0.84696

Высокий

9.8 Critical

CVSS3

CVE ID

Дефекты

CWE-89

Связанные уязвимости

CVE-2022-25125

CVSS3: 9.8

nvd

больше 3 лет назад

MCMS v5.2.4 was discovered to contain a SQL injection vulnerability via search.do in the file /mdiy/dict/listExcludeApp.

EPSS

Процентиль: 99%

0.84696

Высокий

9.8 Critical

CVSS3

CVE ID

Дефекты

CWE-89