GCVE - cpe:2.3:a:mingsoft:mcms:5.2.4:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:mingsoft:mcms:5.2.4:*:*:*:*:*:*:*

part: a version: 5.2.4 update: *

Vendor	Mingsoft (`eb40bbd4-cf90-5441-862d-0610394bbddf`)
Product	Mcms (`3c194228-42fa-5fd1-8adf-8c97a9695f34`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/ming-soft/mcms`	purl2cpe	2026-06-01 10:14:40.770414
`pkg:maven/net.mingsoft/ms-mcms`	purl2cpe	2026-06-01 10:14:40.770415

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-51282`	vulnerable	2026-06-08 06:16:17.315810	Details available An issue in mingSoft MCMS v.5.2.4 allows a a remote attacker to obtain sensitive information via a crafted script to the password parameter. Published: 2024-01-16T00:00:00.000Z Updated: 2025-06-17T14:38:58.790Z Open on db.gcve.eu Reference links https://gitee.com/mingSoft/MCMS/issues/I4Q4NV https://github.com/tanalala/CVE/blob/main/Code.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-25125`	vulnerable	2026-06-08 05:41:45.196267	Details available MCMS v5.2.4 was discovered to contain a SQL injection vulnerability via search.do in the file /mdiy/dict/listExcludeApp. Published: 2022-03-03T18:01:35.000Z Updated: 2024-08-03T04:29:01.957Z Open on db.gcve.eu Reference links https://gitee.com/mingSoft/MCMS/issues/I4TGYI	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-23315`	vulnerable	2026-06-08 05:40:56.979354	Details available MCMS v5.2.4 was discovered to contain an arbitrary file upload vulnerability via the component /ms/template/writeFileContent.do. Published: 2022-01-20T23:40:37.000Z Updated: 2024-08-03T03:36:20.396Z Open on db.gcve.eu Reference links https://gitee.com/mingSoft/MCMS/issues/I4Q4PX	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-23314`	vulnerable	2026-06-08 05:40:56.979045	Details available MCMS v5.2.4 was discovered to contain a SQL injection vulnerability via /ms/mdiy/model/importJson.do. Published: 2022-01-20T23:40:37.000Z Updated: 2024-08-03T03:36:20.489Z Open on db.gcve.eu Reference links https://gitee.com/mingSoft/MCMS/issues/I4Q4OT	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-22930`	vulnerable	2026-06-08 05:40:55.569335	Details available A remote code execution (RCE) vulnerability in the Template Management function of MCMS v5.2.4 allows attackers to execute arbitrary code via a crafted payload. Published: 2022-01-20T23:40:47.000Z Updated: 2024-08-03T03:28:42.395Z Open on db.gcve.eu Reference links https://gitee.com/mingSoft/MCMS/issues/I4Q4M6	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-22929`	vulnerable	2026-06-08 05:40:55.569017	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-22928`	vulnerable	2026-06-08 05:40:55.568540	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-46037`	vulnerable	2026-06-08 05:36:49.695920	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-46036`	vulnerable	2026-06-08 05:36:49.695343	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.