medium6.5
CVE-2024-25428
SQL Injection vulnerability in MRCMS v3.1.2 allows attackers to run arbitrary system commands via the status parameter.
Impact
SQL Injection vulnerability in MRCMS v3.1.2 allows attackers to run arbitrary system commands via the status parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mrcms | Mrcms | Version 3.1.2 |