SQL Injection

Every one of the 20 is a mark on the map. Named now: 1 to 20, most at risk first.

1. MCMS 5.2.5 - SQL InjectionCVE-2022-23898Mingsoft · 7.7% likely

   CWE-89

2. MCMS 5.2.4 - SQL InjectionCVE-2022-25125Mingsoft · 7.0% likely

   CWE-89

3. Mingsoft MCMS v5.2.7 - SQL InjectionCVE-2022-26585Mingsoft · 5.5% likely

   CWE-89

4. Mingsoft MCMS 5.2.7 - SQL InjectionCVE-2022-30047Mingsoft · 4.9% likely

   CWE-89

5. Mingsoft MCMS 5.1 - SQL InjectionCVE-2021-44868Mingsoft · 4.8% likely

   CWE-89

6. Mingsoft MCMS - SQL InjectionCVE-2022-4375Mingsoft · CVSS 6.3 · 3.1% likely

   CWE-89

7. Mingsoft MCMS 5.2.9 - SQL InjectionCVE-2023-50578Mingsoft · CVSS 9.8 · 2.2% likely

   CWE-89

8. MCMS v5.2.4 was discovered to contain a SQL injection vulnerability via /ms/mdiy/model/importJson.do.CVE-2022-23314Mingsoft · 1.6% likely

   CWE-89

9. MCMS v5.2.27 was discovered to contain a SQL injection vulnerability in the orderBy parameter at /dict/list.do.CVE-2022-27466Mingsoft · 1.6% likely

   CWE-89

10. https://gitee.com/mingSoft/MCMS MCMS <=5.2.5 is affected by: SQL Injection. The impact is: obtain sensitive information (remote). The component is: net.mingsoft.mdiy.action.web.Di…CVE-2021-46383Mingsoft · 1.6% likely

    CWE-89

11. https://gitee.com/mingSoft/MCMS MCMS <=5.2.5 is affected by: SQL Injection. The impact is: obtain sensitive information (remote). The component is: net.mingsoft.mdiy.action.FormDa…CVE-2021-46385Mingsoft · 1.5% likely

    CWE-89

12. Mingsoft MCMS 5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/list URI via orderBy parameter.CVE-2022-30048Mingsoft · 1.5% likely

    CWE-89

13. SQL Injection vulnerability found in Ming-Soft MCMS v.4.7.2 allows a remote attacker to execute arbitrary code via basic_title parameter.CVE-2020-20913Mingsoft · CVSS 9.8 · 1.4% likely

    CWE-89

14. An issue was discovered in ming-soft MCMS v5.0, where a malicious user can exploit SQL injection without logging in through /mcms/view.do.CVE-2020-23262Mingsoft · 1.2% likely

    CWE-89

15. Mingsoft MCMS 5.2.8 was discovered to contain a SQL injection vulnerability in /mdiy/model/delete URI via models Lists.CVE-2022-36599Mingsoft · 1.1% likely

    CWE-89

16. Mingsoft MCMS 5.2.8 was discovered to contain a SQL injection vulnerability in /mdiy/page/verify URI via fieldName parameter.CVE-2022-36272Mingsoft · 1.1% likely

    CWE-89

17. MCMS v5.2.5 was discovered to contain a SQL injection vulnerability via search.do in the file /web/MCmsAction.java.CVE-2022-23899Mingsoft · 1.1% likely

    CWE-89

18. A SQL injection vulnerability in the content_title parameter of the /cms/content/list endpoint in MCMS 5.5.0 allows remote attackers to execute arbitrary SQL queries via unsanitiz…CVE-2025-56316Mingsoft · CVSS 9.8 · 0.6% likely

    CWE-89

19. MingSoft MCMS ms-mdiy list.do ModelDataImpl.queryDiyFormData sql injectionCVE-2026-19355MingSoft · CVSS 7.3 · 0.4% likely

    CWE-89

20. mingSoft MCMS Web Content List Endpoint ContentAction.java list sql injectionCVE-2026-4954mingSoft · CVSS 6.3 · 0.2% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.