Mushroom Content Management System
Approved changes feed: RSS · Atom
cpe:2.3:a:mushroom_content_management_system_project:mushroom_content_management_system:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Mushroom Content Management System Project (34fb1ea4-953e-55c3-b814-1d8dae566b6e) |
|---|---|
| Product | Mushroom Content Management System (16ec6f24-246d-524e-b57f-e7405e31c302) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/wuweiit/mushroom |
purl2cpe | 2026-06-01 10:16:30.174095 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-17796 |
vulnerable | 2026-06-08 05:11:06.729184 |
Details available
An issue was discovered in MRCMS (aka mushroom) through 3.1.2. The WebParam.java file directly accepts the FIELD_T parameter in a request and uses it as a hash of SQL statements without filtering, resulting in a SQL injection vulnerability in getChannel() in the ChannelService.java file.
Published: 2018-09-30T20:00:00.000Z
Updated: 2024-08-05T10:54:10.790Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.