CVE-2021-46385: SQL Injection
Published Jan 26, 2022
·Updated
https://gitee.com/mingSoft/MCMS MCMS <=5.2.5 is affected by: SQL Injection. The impact is: obtain sensitive information (remote). The component is: net.mingsoft.mdiy.action.FormDataAction#queryData. The attack vector is: 0 or sleep(3). ¶¶ MCMS has a sql injection vulnerability through which attacker can get sensitive information from the database.
Affected Software
1 affected component
Mingsoft MCMS<=5.2.5
Event History
Jan 26, 2022
CVE Published
via MITRE·06:35 PM
Data Sourced
via MITRE·06:35 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2021-46385.
2
What is the severity of CVE-2021-46385?
The severity of CVE-2021-46385 is high with a score of 7.5.
3
What is the impact of CVE-2021-46385?
The impact of CVE-2021-46385 is the ability to obtain sensitive information remotely through SQL Injection.
4
What is the affected software by CVE-2021-46385?
The affected software is Mingsoft MCMS version up to and including 5.2.5.
5
How can I fix CVE-2021-46385?
To fix CVE-2021-46385, it is recommended to update to a version of Mingsoft MCMS that is higher than 5.2.5.