critical9.8
CVE-2020-20913
Ming-Soft MCMS vulnerable to SQL injection
Impact
SQL Injection vulnerability found in Ming-Soft MCMS v.4.7.2 allows a remote attacker to execute arbitrary code via `basic_title` parameter. This issue is resolved in v5.1.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | net.mingsoft:ms-mcms | < 5.1 | 5.1 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mingsoft | Mcms | Version 4.7.2 |