Mingsoft MCMS 5.1 - SQL Injection
Mingsoft MCMS 5.1 contains a SQL injection vulnerability in POST /ms/cms/content/list.do via the contentCategoryId parameter (mapped to categoryId in ContentBizImpl.java / IContentDao.xml). The original PoC uses a time-based SLEEP payload. Snyk's write-up uses an authenticated request (PR:Low), while NVD rates it as unauthenticated (PR:N); this template probes the endpoint without credentials first. No vendor-fixed version was listed by Snyk at disclosure. References: https://github.com/ming-soft/MCMS/issues/58 https://security.snyk.io/vuln/SNYK-JAVA-NETMINGSOFT-2404812 https://nvd.nist.gov/vuln/detail/CVE-2021-44868 Remediation: Apply the vendor's patch for the contentCategoryId / categoryId handling in ContentBizImpl and IContentDao, or upgrade to a later MCMS release that parameterizes this query.
9 assets checked · domain, subdomain, ipv4