CVE-2022-27466: SQL Injection
Published May 2, 2022
·Updated
MCMS v5.2.27 was discovered to contain a SQL injection vulnerability in the orderBy parameter at /dict/list.do.
Affected Software
1 affected component
Mingsoft MCMS=5.2.27
Event History
May 2, 2022
CVE Published
via MITRE·01:24 PM
Data Sourced
via MITRE·01:24 PM
Description
Frequently Asked Questions
1
What is CVE-2022-27466?
CVE-2022-27466 is a SQL injection vulnerability discovered in MCMS v5.2.27, specifically in the orderBy parameter at /dict/list.do.
2
How severe is CVE-2022-27466?
CVE-2022-27466 has a severity rating of 9.8 (Critical).
3
What software is affected by CVE-2022-27466?
MCMS v5.2.27 is the affected software version for CVE-2022-27466.
4
What is the CWE category of CVE-2022-27466?
CVE-2022-27466 belongs to the CWE category 89 - SQL Injection.
5
Where can I find more information about CVE-2022-27466?
You can find more information about CVE-2022-27466 at the following reference: [GitHub Issue](https://github.com/ming-soft/MCMS/issues/90)