SQL Injection Vulnerability in Mingsoft MCMS by Mingsoft
CVE-2022-36599

9.8CRITICAL

Key Information:

Vendor: Mingsoft
Status: Mcms
Vendor: CVE Published:; 16 August 2022

What is CVE-2022-36599?

Mingsoft MCMS version 5.2.8 is susceptible to a SQL injection vulnerability. This weakness can be exploited through the /mdiy/model/delete URI via models Lists, potentially allowing attackers to manipulate database queries. It emphasizes the need for secure coding practices and regular software updates to mitigate such security risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://gitee.com/mingSoft/MCMS/issues/I5I1P5

x_refsource_MISC

CVSS V3.1

Score:

9.8

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Aug 16, 2022
Vulnerability Reserved
Jul 25, 2022

JSON

Mingsoft

What is CVE-2022-36599?

Human OS v1.0: Ageing Is an Unpatched Zero-Day Vulnerability.

References

CVSS V3.1

Timeline

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.