Approved changes feed: RSS · Atom

cpe:2.3:a:chshcms:mccms:2.6:*:*:*:*:*:*:*

part: a version: 2.6 update: *

VendorChshcms (9c9d551c-1b9d-5c49-aa9e-1511d295c03d)
ProductMccms (fb0b6ab8-a03d-59c4-b8ec-1c82095ab58a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-5029 vulnerable 2026-06-08 06:19:40.730059 mccms 1 sql injection
MEDIUM (5.5)
A vulnerability, which was classified as critical, was found in mccms 2.6. This affects an unknown part of the file /category/order/hits/copyright/46/finish/1/list/1. The manipulation with the input '"1 leads to sql injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-239871.
Published: 2023-09-17T21:31:04.605Z
Updated: 2024-09-25T14:06:10.813Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-26781 vulnerable 2026-06-08 05:57:40.341034 Details available
SQL injection vulnerability in mccms 2.6 allows remote attackers to run arbitrary SQL commands via Author Center ->Reader Comments ->Search.
Published: 2023-04-28T00:00:00.000Z
Updated: 2025-01-31T16:42:04.375Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.