Search for packages
| purl | pkg:maven/net.mingsoft/ms-mcms@5.2 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 4.4 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-wvv5-5g6x-hp7j
Aliases: CVE-2025-60837 |
MCMS reflected cross-site scripting (XSS) vulnerability A reflected cross-site scripting (XSS) vulnerability in MCMS v6.0.1 allows attackers to execute arbitrary … | There are no reported fixed by versions. |
|
GHSA-3922-2r6r-r4fv
Aliases: CVE-2025-29287 |
MCMS allows arbitrary file uploads in the ueditor component An arbitrary file upload vulnerability in the ueditor component of MCMS … |
Vulnerable |
|
GHSA-mx3x-rmrh-9wf6
Aliases: CVE-2022-26585 |
SQL injection in net.mingsoft:ms-mcms Mingsoft MCMS v5.2.7 was discovered to contain a SQL injection vulnerability via /cms/content/list. | There are no reported fixed by versions. |
|
GHSA-g94p-h263-c26q
Aliases: CVE-2022-27340 |
Cross Site Request Forgery in Mingsoft MCMS MCMS v5.2.7 contains a Cross-Site Request Forgery (CSRF) via /role/saveOrUpdateRole.do. This vulnerability allows … | There are no reported fixed by versions. |
|
GHSA-hc5g-xf64-j49j
Aliases: CVE-2022-4375 |
Mingsoft MCMS vulnerable to SQL Injection A vulnerability was found in Mingsoft MCMS up to 5.2.9. It has been classified … |
Vulnerable |
|
GHSA-6rvv-h8g7-728w
Aliases: CVE-2022-4640 |
Mingsoft MCMS Cross-site Scripting vulnerability A vulnerability has been found in Mingsoft MCMS 5.2.9 and classified as problematic. Affected by … | There are no reported fixed by versions. |
|
GHSA-p46c-m4j7-mjvq
Aliases: CVE-2022-4350 |
Mingsoft MCMS vulnerable to Cross-site Scripting A vulnerability, which was classified as problematic, was found in Mingsoft MCMS 5.2.8. Affected … | There are no reported fixed by versions. |
|
GHSA-g8j8-mgh9-q77p
Aliases: CVE-2021-46036 |
File upload leading to RCE in MCMS An arbitrary file upload vulnerability in the component /ms/file/uploadTemplate.do of MCMS v5.2.4 allows … | There are no reported fixed by versions. |
|
GHSA-73wx-rpj3-mx46
Aliases: CVE-2021-46037 |
Path traversal in MCMS MCMS v5.2.4 was discovered to contain an arbitrary file deletion vulnerability via the component /template/unzip.do. | There are no reported fixed by versions. |
|
GHSA-gc79-gh4f-9g6w
Aliases: CVE-2021-46063 |
Server Side Template Injection in MCMS MCMS v5.2.5 was discovered to contain a Server Side Template Injection (SSTI) vulnerability via … | There are no reported fixed by versions. |
|
GHSA-rpvr-mw7r-25xx
Aliases: CVE-2021-46062 |
MCMS Arbitrary File Deletion vulnerability `net.mingsoft:ms-basic` is used for plugin management for applications built with Maven for the [Mingfei Content … |
Vulnerable |
|
GHSA-gp39-qj5f-43qv
Aliases: CVE-2022-29647 |
Cross Site Request Forgery in Mingsoft MCMS An issue was discovered in MCMS 5.2.7. There is a CSRF vulnerability that … | There are no reported fixed by versions. |
|
GHSA-6xj9-hpq3-w3qw
Aliases: CVE-2022-30506 |
Code injection in MCMS An arbitrary file upload vulnerability was discovered in MCMS 5.2.7, allowing an attacker to execute arbitrary … | There are no reported fixed by versions. |
|
GHSA-hmj3-mqgw-2fq6
Aliases: CVE-2022-36272 |
Mingsoft MCMS SQL injection vulnerability in /mdiy/page/verify URI via fieldName parameter Mingsoft MCMS 5.2.8 was discovered to contain a SQL … | There are no reported fixed by versions. |
|
GHSA-w3rc-2whg-w934
Aliases: CVE-2022-36599 |
Mingsoft MCMS SQL injection vulnerability in /mdiy/model/delete URI via models List Mingsoft MCMS 5.2.8 was discovered to contain a SQL … | There are no reported fixed by versions. |
|
GHSA-p94q-9q2m-pfh2
Aliases: CVE-2022-23898 |
SQL injection in net.mingsoft:ms-mcms MCMS v5.2.5 was discovered to contain a SQL injection vulnerability via the categoryId parameter in the … | There are no reported fixed by versions. |
|
GHSA-968c-mm28-jfw4
Aliases: CVE-2022-23899 |
SQL injection in net.mingsoft:ms-mcms MCMS v5.2.5 was discovered to contain a SQL injection vulnerability via search.do in the file /web/MCmsAction.java. | There are no reported fixed by versions. |
|
GHSA-qwh6-xwj4-9cjg
Aliases: CVE-2021-46384 |
Remote code execution in net.mingsoft:ms-mcms net.mingsoft:ms-mcms <=5.2.5 is affected by: RCE. The impact is: execute arbitrary code (remote). The attack … |
Vulnerable |
|
GHSA-fr5w-98mc-jjvg
Aliases: CVE-2022-23315 |
Arbitrary file upload in Mingsoft MCMS MCMS v5.2.4 was discovered to contain an arbitrary file upload vulnerability via the component … | There are no reported fixed by versions. |
|
GHSA-8wq7-hhjj-fpqv
Aliases: CVE-2022-22930 |
RCE in Mingsoft MCMS A remote code execution (RCE) vulnerability in the Template Management function of MCMS allows attackers to … |
Vulnerable |
|
GHSA-phwq-9gc4-q5c8
Aliases: CVE-2021-46385 |
Mingsoft MCMS SQL injection vulnerability Mingsoft MCMS contains a SQL injection vulnerability in the `/querydata` endpoint | There are no reported fixed by versions. |
|
GHSA-cwx9-rp4w-4545
Aliases: CVE-2021-46386 |
Mingsoft MCMS vulnerable to Remote Code Execution via file upload. Mingsoft MCMS is a Java CMS. Versions prior to and … | There are no reported fixed by versions. |
|
GHSA-77hh-p7r6-66pv
Aliases: CVE-2022-22929 |
Arbitrary File Upload in Mingsoft MCMS MCMS v5.2.4 was discovered to have an arbitrary file upload vulnerability in the New … | There are no reported fixed by versions. |
|
GHSA-qqc2-pv68-q72h
Aliases: CVE-2021-46383 |
Mingsoft MCMS SQL injection vulnerability Mingsoft MCMS contains a SQL injection vulnerability relating to the component `net.mingsoft.mdiy.action.web.DictAction#list`. |
Vulnerable |
|
GHSA-7qw4-9r68-2rmx
Aliases: CVE-2024-22567 |
mingSoft MCMS File Upload vulnerability File Upload vulnerability in MCMS 5.3.5 allows attackers to upload arbitrary files via crafted POST … | There are no reported fixed by versions. |
|
GHSA-h57w-vh34-f8cw
Aliases: CVE-2023-51282 |
Code injection in mingSoft MCMS An issue in mingSoft MCMS v.5.2.4 allows a a remote attacker to obtain sensitive information … | There are no reported fixed by versions. |
|
GHSA-3vvh-8c65-32j4
Aliases: CVE-2023-50578 |
Mingsoft MCMS SQL injection Mingsoft MCMS v5.2.9 was discovered to contain a SQL injection vulnerability via the categoryType parameter at … | There are no reported fixed by versions. |
|
GHSA-65v6-3c9m-hmrp
Aliases: CVE-2022-47042 |
Arbitrary file write in net.mingsoft:ms-mcms MCMS v5.2.10 and below was discovered to contain an arbitrary file write vulnerability via the … |
Vulnerable |
|
GHSA-r9wp-qq53-qvjx
Aliases: CVE-2026-2666 |
mingSoft MCMS does not properly restrict file uploads A flaw has been found in mingSoft MCMS 6.1.1. The affected element … | There are no reported fixed by versions. |
|
GHSA-rxvj-5mv6-j5mc
Aliases: CVE-2023-3990 |
Cross-site Scripting in Mingsoft MCMS A Cross-site Scripting vulnerability has been found in Mingsoft MCMS up to 5.3.1. This affects … |
Vulnerable Vulnerable |