MLECMS MLECMS 3.0

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:mlecms:mlecms:3.0:*:*:*:*:*:*:*

part: a version: 3.0 update: *

VendorMlecms (edd02ade-7569-5d29-99db-2d0e2fcfd51a)
ProductMlecms (c5be24e8-2a22-5101-9913-0f6d5cd9f84f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-2420 vulnerable 2026-06-08 06:02:42.271361 MLECMS common.func.php get_url sql injection
MEDIUM (6.3)
A vulnerability was found in MLECMS 3.0. It has been rated as critical. This issue affects the function get_url in the library /upload/inc/lib/admin of the file upload\inc\include\common.func.php. The manipulation of the argument $_SERVER['REQUEST_URI'] leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-227717 was assigned to this vulnerability.
Published: 2023-04-29T01:31:03.540Z
Updated: 2025-01-30T18:17:15.876Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.