Approved changes feed: RSS · Atom

cpe:2.3:a:mingsoft:mcms:5.2.5:*:*:*:*:*:*:*

part: a version: 5.2.5 update: *

VendorMingsoft (eb40bbd4-cf90-5441-862d-0610394bbddf)
ProductMcms (3c194228-42fa-5fd1-8adf-8c97a9695f34)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/ming-soft/mcms purl2cpe 2026-06-01 10:14:40.770417
pkg:maven/net.mingsoft/ms-mcms purl2cpe 2026-06-01 10:14:40.770418

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-23899 vulnerable 2026-06-08 05:40:59.305538 Details available
MCMS v5.2.5 was discovered to contain a SQL injection vulnerability via search.do in the file /web/MCmsAction.java.
Published: 2022-03-03T18:01:34.000Z
Updated: 2024-08-03T03:59:22.740Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-23898 vulnerable 2026-06-08 05:40:59.305009 Details available
MCMS v5.2.5 was discovered to contain a SQL injection vulnerability via the categoryId parameter in the file IContentDao.xml.
Published: 2022-03-03T18:01:34.000Z
Updated: 2024-08-03T03:59:22.025Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-46063 vulnerable 2026-06-08 05:36:49.716930 Details available
MCMS v5.2.5 was discovered to contain a Server Side Template Injection (SSTI) vulnerability via the Template Management module.
Published: 2022-02-18T19:36:42.000Z
Updated: 2024-08-04T04:54:31.144Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-46062 vulnerable 2026-06-08 05:36:49.716440 Details available
MCMS v5.2.5 was discovered to contain an arbitrary file deletion vulnerability via the component oldFileName.
Published: 2022-02-18T19:36:41.000Z
Updated: 2024-08-04T04:54:31.319Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.