Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Mingsoft MCMS search.do cross site scripting
Vulnerability Description
A vulnerability, which was classified as problematic, was found in Mingsoft MCMS 5.2.8. Affected is an unknown function of the file search.do. The manipulation of the argument content_title leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-215112.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Vulnerability Type
对消息或数据结构的处理不恰当
Vulnerability Title
MingSoft MCMS 安全漏洞
Vulnerability Description
MingSoft MCMS是中国铭飞（MingSoft）公司的一个完整开源的 J2ee 系统。 MingSoft MCMS 5.2.8版本存在安全漏洞，该漏洞源于其search.do文件的未知函数对content_title参数的操作导致攻击者实现跨站脚本。该攻击方法已经被公开并且可以由远程发起，存在被利用的风险。
CVSS Information
N/A
Vulnerability Type
N/A