MCMS v5.2.5 was discovered to contain a SQL injection vulnerability via the categoryId parameter in the file IContentDao.xml.
References:GSA_kwCzR0hTQS1wOTRxLTlxMm0tcGZoMs0v9Q
SQL injection in net.mingsoft:ms-mcms
| Affected Packages | Affected Versions | Fixed Versions | |
|---|---|---|---|
| maven:net.mingsoft:ms-mcms | <= 5.2.5 | No known fixed version | |
Affected Version RangesAll affected versions4.6.5, 4.7.1, 4.7.2, 5.0.0, 5.0.1, 5.2.0, 5.2.1, 5.2.2, 5.2.3, 5.2.4, 5.2.5 |
|||