Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2022-30506

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-6xj9-hpq3-w3qw

Code injection in MCMS An arbitrary file upload vulnerability was discovered in MCMS 5.2.7, allowing an attacker to execute arbitrary code through a crafted ZIP file.

gitlab/maven/net.mingsoft/ms-mcms/CVE-2022-30506

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') An arbitrary file upload vulnerability was discovered in MCMS 5.2.7, allowing an attacker to execute arbitrary code through a crafted ZIP file.