Skip to content
Threat Feed
Subscribe

Vendor

MingSoft

2 briefs RSS
high advisory

Multiple Vulnerabilities in Dromara MaxKey, mingSoft MCMS, and OpenAuth.Net

Multiple unauthenticated vulnerabilities were disclosed across Dromara MaxKey, mingSoft MCMS, and OpenAuth.Net, including XSS, information disclosure, and account takeover paths.

MaxKey +2
2t 4c
high advisory

SQL Injection Vulnerability in MingSoft MCMS

MingSoft MCMS versions up to 3.0.6 contain a remote SQL injection vulnerability in the ms-mdiy component, allowing unauthenticated attackers to manipulate the formFields argument to execute arbitrary database queries.

MCMS web-vulnerability sqli vulnerability-management
1r 1t 1c