GHSA-h3hw-g4hm-7gr4
SQL injection without credentials in ming-soft MCMS
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | net.mingsoft:ms-mcms | < 5.1 | 5.1 |
Details
As written in the advisory (Markdown source, shown as plain text).
An issue was discovered in ming-soft MCMS v5.0, where a malicious user can exploit SQL injection without logging in through /mcms/view.do.
References
External links from the advisory. They lead to third-party sites.