Approved changes feed: RSS · Atom
cpe:2.3:a:mingsoft:mcms:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Mingsoft (eb40bbd4-cf90-5441-862d-0610394bbddf) |
|---|---|
| Product | Mcms (3c194228-42fa-5fd1-8adf-8c97a9695f34) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/ming-soft/mcms |
purl2cpe | 2026-06-01 10:14:40.764554 |
pkg:maven/net.mingsoft/ms-mcms |
purl2cpe | 2026-06-01 10:14:40.764556 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-19355 |
vulnerable | 2026-09-16 04:34:15.681016 |
MingSoft MCMS ms-mdiy list.do ModelDataImpl.queryDiyFormData sql injection
HIGH (7.3)
A vulnerability was determined in MingSoft MCMS up to 3.0.6. This affects the function ModelDataImpl.queryDiyFormData of the file /mdiy/form/data/list.do of the component ms-mdiy. Executing a manipulation of the argument formFields can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-08-09T13:30:09.885Z
Updated: 2026-08-10T13:46:49.247Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-19356 |
vulnerable | 2026-09-16 04:34:15.453684 |
MingSoft MCMS ms-mdiy list information disclosure
MEDIUM (5.3)
A vulnerability was identified in MingSoft MCMS up to 3.0.6. This impacts an unknown function of the file /mdiy/form/data/list of the component ms-mdiy. The manipulation leads to information disclosure. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-08-09T13:45:07.171Z
Updated: 2026-08-13T19:07:19.920Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-19357 |
vulnerable | 2026-09-16 04:34:15.261637 |
MingSoft MCMS ms-mdiy get information disclosure
MEDIUM (5.3)
A security flaw has been discovered in MingSoft MCMS up to 3.0.6. Affected is an unknown function of the file /mdiy/form/get of the component ms-mdiy. The manipulation results in information disclosure. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-08-09T14:45:07.266Z
Updated: 2026-08-10T16:02:37.643Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-4954 |
vulnerable | 2026-06-08 08:07:02.696423 |
mingSoft MCMS Web Content List Endpoint ContentAction.java list sql injection
MEDIUM (6.3)
A security vulnerability has been detected in mingSoft MCMS up to 5.5.0. Impacted is the function list of the file net/mingsoft/cms/action/web/ContentAction.java of the component Web Content List Endpoint. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.
Published: 2026-03-27T14:13:38.633Z
Updated: 2026-03-27T22:16:13.177Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-4953 |
vulnerable | 2026-06-08 08:07:02.695915 |
mingSoft MCMS Editor Endpoint BaseAction.java catchImage server-side request forgery
HIGH (7.3)
A weakness has been identified in mingSoft MCMS up to 5.5.0. This issue affects the function catchImage of the file net/mingsoft/cms/action/BaseAction.java of the component Editor Endpoint. Executing a manipulation of the argument catchimage can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks.
Published: 2026-03-27T14:13:36.216Z
Updated: 2026-03-30T12:05:18.706Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2666 |
vulnerable | 2026-06-08 07:55:17.361827 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-60838 |
vulnerable | 2026-06-08 07:37:27.382462 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-60837 |
vulnerable | 2026-06-08 07:37:27.382108 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3990 |
vulnerable | 2026-06-08 06:09:40.977749 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4640 |
vulnerable | 2026-06-08 05:52:00.080730 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4375 |
vulnerable | 2026-06-08 05:51:37.366719 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4350 |
vulnerable | 2026-06-08 05:51:37.318000 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-46386 |
vulnerable | 2026-06-08 05:38:03.320310 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-46385 |
vulnerable | 2026-06-08 05:38:03.319866 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-46384 |
vulnerable | 2026-06-08 05:38:03.319338 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-46383 |
vulnerable | 2026-06-08 05:38:03.318764 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.