TI-2020-14404 CVE-2020-22820 · GHSA-xmcq-hv2q-36wr
MKCMS V6.2 has SQL injection via the /ucenter/repass.php name parameter.
Priority HIGH 82
MKCMS V6.2 has SQL injection via the /ucenter/repass.php name parameter.
Mkcms Project
Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Mkcms Project records in CISA KEVNo Mkcms Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
6 records
TI-2020-14403 CVE-2020-22819 · GHSA-6jf5-g8g9-p29c
MKCMS V6.2 has SQL injection via the /ucenter/active.php verify parameter.
Priority HIGH 82
MKCMS V6.2 has SQL injection via the /ucenter/active.php verify parameter.
TI-2020-14402 CVE-2020-22818 · GHSA-3f2r-h473-hqjx
MKCMS V6.2 has SQL injection via /ucenter/reg.php name parameter.
Priority HIGH 82
MKCMS V6.2 has SQL injection via /ucenter/reg.php name parameter.
TI-2019-07986 CVE-2019-10707 · GHSA-93cj-gc2w-39fm
MKCMS V5.0 has SQL injection via the bplay.php play parameter.
Priority MEDIUM 45
MKCMS V5.0 has SQL injection via the bplay.php play parameter.
TI-2019-08464 CVE-2019-11332 · GHSA-28v8-9562-2vxf
MKCMS 5.0 allows remote attackers to take over arbitrary user accounts by posting a…
Priority MEDIUM 42
MKCMS 5.0 allows remote attackers to take over arbitrary user accounts by posting a username and e-mail address to ucenter/repass.php, which triggers e-mail transmission with the password, as demonstrated by 123456.
TI-2019-08285 CVE-2019-11078 · GHSA-877w-p5g7-2g53
MKCMS V5.0 has a CSRF vulnerability to add a new admin user via the ucenter/userinfo.php URI.
Priority LOW 39
MKCMS V5.0 has a CSRF vulnerability to add a new admin user via the ucenter/userinfo.php URI.