298,930
Total vulnerabilities in the database
A SQL injection vulnerability in the content_title parameter of the /cms/content/list endpoint in MCMS 5.5.0 allows remote attackers to execute arbitrary SQL queries via unsanitized input in the FreeMarker template rendering.
| Software | From | Fixed in |
|---|---|---|
net.mingsoft / ms-mcms
|
5.5.0 | 6.0.2 |
| mingsoft / mcms | 5.5.0 | 5.5.0.x |
| mingsoft / mcms | 6.0.1 | 6.0.1.x |