WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Vendor mingsoft✕
Overview 47 matches · 0 in Waratek scope · 0 protected · 2 exploited · 0 CISA KEV · 8 public PoC · 0 EPSS ≥ 0.5
47matches 0in Waratek scope0.0% 0protected0.0% 2exploited4.3% 0CISA KEV0.0% 8public PoC17.0% 0EPSS ≥ 0.50.0%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 39 83.0% Not applicable 8 17.0% Withdrawn CVE 0 0.0%
Critical 28 59.6% High 13 27.7% Medium 5 10.6% Low 1 2.1% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 47 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 2 4.3% Working exploit published 6 12.8% Proof of concept only 10 21.3% Forecast only 0 0.0% No public exploit 29 61.7%
split by peak 30 / year
Not applicable: 8Outside Waratek scope: 39 Low: 1Medium: 5High: 13Critical: 28 not blocked: 47 No public exploit: 29Proof of concept only: 10Working exploit published: 6Exploited: 2
20183 Outside Waratek scope3 Critical1 High2 not blocked3 No public exploit3 20190 20200 20211 Outside Waratek scope1 Critical1 not blocked1 No public exploit1 202230 Outside Waratek scope24 Not applicable6 Critical22 High6 Medium2 not blocked30 Exploited2 Working exploit published4 Proof of concept only2 No public exploit22 20235 Outside Waratek scope5 Critical2 High2 Medium1 not blocked5 Working exploit published2 Proof of concept only3 20243 Outside Waratek scope2 Not applicable1 High3 not blocked3 Proof of concept only3 20254 Outside Waratek scope3 Not applicable1 Critical2 Medium2 not blocked4 Proof of concept only1 No public exploit3 20261 Outside Waratek scope1 Low1 not blocked1 Proof of concept only1
201820192020202120222023202420252026
47 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2026-2666 Low 2026-02-18 Outside Waratek scope Proof of concept only A flaw has been found in mingSoft MCMS 6.1.1. The affected element is an unknown function of the file /ms/file/uploadTemplate.do of the component Template Archive Handler. Executing a manipulation of the argument File can lead to unrestricted upload. The attack can be launched remotely. The exploit has been published and may be used.
CVE-2025-60837 Medium 2025-10-23 Outside Waratek scope No public exploit A reflected cross-site scripting (XSS) vulnerability in MCMS v6.0.1 allows attackers to execute arbitrary Javascript in the context of a user's browser via a crafted payload.
CVE-2025-56316 Critical 2025-10-17 Outside Waratek scope No public exploit A SQL injection vulnerability in the content_title parameter of the /cms/content/list endpoint in MCMS 5.5.0 allows remote attackers to execute arbitrary SQL queries via unsanitized input in the FreeMarker template rendering.
CVE-2025-60838 Medium 2025-10-10 Not applicable No public exploit An arbitrary file upload vulnerability in MCMS v6.0.1 allows attackers to execute arbitrary code via uploading a crafted file.
CVE-2025-29287 Critical 2025-04-21 Outside Waratek scope Proof of concept only An arbitrary file upload vulnerability in the ueditor component of MCMS v5.4.3 allows attackers to execute arbitrary code via uploading a crafted file.
CVE-2024-42991 High 2024-09-03 Not applicable Proof of concept only MCMS v5.4.1 has front-end file upload vulnerability which can lead to remote command execution.
CVE-2024-22567 High 2024-02-05 Outside Waratek scope Proof of concept only File Upload vulnerability in MCMS 5.3.5 allows attackers to upload arbitrary files via crafted POST request to /ms/file/upload.do.
CVE-2023-51282 High 2024-01-16 Outside Waratek scope Proof of concept only An issue in mingSoft MCMS v.5.2.4 allows a a remote attacker to obtain sensitive information via a crafted script to the password parameter.
CVE-2023-50578 Critical 2023-12-30 Outside Waratek scope Working exploit published Mingsoft MCMS v5.2.9 was discovered to contain a SQL injection vulnerability via the categoryType parameter at /content/list.do.
CVE-2023-3990 Medium 2023-07-28 Outside Waratek scope Working exploit published A vulnerability classified as problematic has been found in Mingsoft MCMS up to 5.3.1. This affects an unknown part of the file search.do of the component HTTP POST Request Handler. The manipulation of the argument style leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-235611.
CVE-2020-22755 High 2023-05-08 Outside Waratek scope Proof of concept only File upload vulnerability in MCMS 5.0 allows attackers to execute arbitrary code via a crafted thumbnail. A different vulnerability than CVE-2022-31943.
CVE-2020-20913 Critical 2023-04-04 Outside Waratek scope Proof of concept only SQL Injection vulnerability found in Ming-Soft MCMS v.4.7.2 allows a remote attacker to execute arbitrary code via basic_title parameter.
CVE-2022-47042 High 2023-01-26 Outside Waratek scope Proof of concept only MCMS v5.2.10 and below was discovered to contain an arbitrary file write vulnerability via the component ms/template/writeFileContent.do.
CVE-2022-4640 Medium 2022-12-21 Outside Waratek scope Proof of concept only A vulnerability has been found in Mingsoft MCMS 5.2.9 and classified as problematic. Affected by this vulnerability is the function save of the component Article Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-216499.
CVE-2022-4375 Critical 2022-12-09 Outside Waratek scope Working exploit published A vulnerability was found in Mingsoft MCMS up to 5.2.9. It has been classified as critical. Affected is an unknown function of the file /cms/category/list. The manipulation of the argument sqlWhere leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 5.2.10 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-215196.
CVE-2022-4350 Medium 2022-12-08 Outside Waratek scope Proof of concept only A vulnerability, which was classified as problematic, was found in Mingsoft MCMS 5.2.8. Affected is an unknown function of the file search.do. The manipulation of the argument content_title leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-215112.
CVE-2022-36599 Critical 2022-08-16 Outside Waratek scope No public exploit Mingsoft MCMS 5.2.8 was discovered to contain a SQL injection vulnerability in /mdiy/model/delete URI via models Lists.
CVE-2022-36272 Critical 2022-08-16 Outside Waratek scope No public exploit Mingsoft MCMS 5.2.8 was discovered to contain a SQL injection vulnerability in /mdiy/page/verify URI via fieldName parameter.
CVE-2022-31943 Critical 2022-07-01 Outside Waratek scope No public exploit MCMS v5.2.8 was discovered to contain an arbitrary file upload vulnerability.
CVE-2022-30506 Critical 2022-06-02 Outside Waratek scope No public exploit An arbitrary file upload vulnerability was discovered in MCMS 5.2.7, allowing an attacker to execute arbitrary code through a crafted ZIP file.
CVE-2022-29647 High 2022-06-02 Outside Waratek scope No public exploit An issue was discovered in MCMS 5.2.7. There is a CSRF vulnerability that can add an administrator account via ms/basic/manager/save.do.
CVE-2022-30048 Critical 2022-05-11 Not applicable No public exploit Mingsoft MCMS 5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/list URI via orderBy parameter.
CVE-2022-30047 Critical 2022-05-11 Not applicable Exploited Mingsoft MCMS v5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/listExcludeApp URI via orderBy parameter.
CVE-2022-27466 Critical 2022-05-02 Not applicable No public exploit MCMS v5.2.27 was discovered to contain a SQL injection vulnerability in the orderBy parameter at /dict/list.do.
CVE-2022-27340 High 2022-04-22 Outside Waratek scope No public exploit MCMS v5.2.7 contains a Cross-Site Request Forgery (CSRF) via /role/saveOrUpdateRole.do. This vulnerability allows attackers to escalate privileges and modify data.
CVE-2022-26585 Critical 2022-04-05 Outside Waratek scope Working exploit published Mingsoft MCMS v5.2.7 was discovered to contain a SQL injection vulnerability via /cms/content/list.
CVE-2021-46384 Critical 2022-03-04 Outside Waratek scope No public exploit https://gitee.com/mingSoft/MCMS MCMS <=5.2.5 is affected by: RCE. The impact is: execute arbitrary code (remote). The attack vector is: ${"freemarker.template.utility.Execute"?new()("calc")}. ¶¶ MCMS has a pre-auth RCE vulnerability through which allows unauthenticated attacker with network access via http to compromise MCMS. Successful attacks of this vulnerability can result in takeover of MCMS.
CVE-2022-25125 Critical 2022-03-03 Not applicable Working exploit published MCMS v5.2.4 was discovered to contain a SQL injection vulnerability via search.do in the file /mdiy/dict/listExcludeApp.
CVE-2022-23899 Critical 2022-03-03 Outside Waratek scope No public exploit MCMS v5.2.5 was discovered to contain a SQL injection vulnerability via search.do in the file /web/MCmsAction.java.
CVE-2022-23898 Critical 2022-03-03 Outside Waratek scope Working exploit published MCMS v5.2.5 was discovered to contain a SQL injection vulnerability via the categoryId parameter in the file IContentDao.xml.
CVE-2021-46063 Critical 2022-02-18 Outside Waratek scope No public exploit MCMS v5.2.5 was discovered to contain a Server Side Template Injection (SSTI) vulnerability via the Template Management module.
CVE-2021-46062 High 2022-02-18 Outside Waratek scope No public exploit MCMS v5.2.5 was discovered to contain an arbitrary file deletion vulnerability via the component oldFileName.
CVE-2021-46037 High 2022-02-18 Outside Waratek scope No public exploit MCMS v5.2.4 was discovered to contain an arbitrary file deletion vulnerability via the component /template/unzip.do.
CVE-2021-46036 Critical 2022-02-18 Outside Waratek scope No public exploit An arbitrary file upload vulnerability in the component /ms/file/uploadTemplate.do of MCMS v5.2.4 allows attackers to execute arbitrary code.
CVE-2021-44868 Critical 2022-02-17 Outside Waratek scope Exploited A problem was found in ming-soft MCMS v5.1. There is a sql injection vulnerability in /ms/cms/content/list.do
CVE-2021-46386 Critical 2022-01-26 Outside Waratek scope No public exploit File upload vulnerability in mingSoft MCMS through 5.2.5, allows remote attackers to execute arbitrary code via a crafted jspx webshell to net.mingsoft.basic.action.web.FileAction#upload.
CVE-2021-46385 High 2022-01-26 Outside Waratek scope No public exploit https://gitee.com/mingSoft/MCMS MCMS <=5.2.5 is affected by: SQL Injection. The impact is: obtain sensitive information (remote). The component is: net.mingsoft.mdiy.action.FormDataAction#queryData. The attack vector is: 0 or sleep(3). ¶¶ MCMS has a sql injection vulnerability through which attacker can get sensitive information from the database.
CVE-2021-46383 High 2022-01-26 Outside Waratek scope No public exploit https://gitee.com/mingSoft/MCMS MCMS <=5.2.5 is affected by: SQL Injection. The impact is: obtain sensitive information (remote). The component is: net.mingsoft.mdiy.action.web.DictAction#list. The attack vector is: 0 or sleep(3). ¶¶ MCMS has a sql injection vulnerability through which attacker can get sensitive information from the database.
CVE-2022-23315 Critical 2022-01-21 Outside Waratek scope No public exploit MCMS v5.2.4 was discovered to contain an arbitrary file upload vulnerability via the component /ms/template/writeFileContent.do.
CVE-2022-23314 Critical 2022-01-21 Not applicable No public exploit MCMS v5.2.4 was discovered to contain a SQL injection vulnerability via /ms/mdiy/model/importJson.do.
CVE-2022-22930 Critical 2022-01-21 Outside Waratek scope No public exploit A remote code execution (RCE) vulnerability in the Template Management function of MCMS v5.2.4 allows attackers to execute arbitrary code via a crafted payload.
CVE-2022-22929 Critical 2022-01-21 Outside Waratek scope No public exploit MCMS v5.2.4 was discovered to have an arbitrary file upload vulnerability in the New Template module, which allows attackers to execute arbitrary code via a crafted ZIP file.
CVE-2022-22928 Critical 2022-01-21 Not applicable No public exploit MCMS v5.2.4 was discovered to have a hardcoded shiro-key, allowing attackers to exploit the key and execute arbitrary code.
CVE-2020-23262 Critical 2021-01-26 Outside Waratek scope No public exploit An issue was discovered in ming-soft MCMS v5.0, where a malicious user can exploit SQL injection without logging in through /mcms/view.do.
CVE-2018-18831 High 2018-10-30 Outside Waratek scope No public exploit An issue was discovered in com\mingsoft\cms\action\GeneraterAction.java in MCMS 4.6.5. An attacker can write a .jsp file (in the position parameter) to an arbitrary directory via a ../ Directory Traversal in the url parameter.
CVE-2018-18830 Critical 2018-10-30 Outside Waratek scope No public exploit An issue was discovered in com\mingsoft\basic\action\web\FileAction.java in MCMS 4.6.5. Since the upload interface does not verify the user login status, you can use this interface to upload files without setting a cookie. First, start an upload of JSP code with a .png filename, and then intercept the data packet. In the name parameter, change the suffix to jsp. In the response, the server returns the storage path of the file, which can be accessed to execute arbitrary JSP code.
CVE-2018-17366 High 2018-09-23 Outside Waratek scope No public exploit An issue was discovered in MCMS 4.6.5. There is a CSRF vulnerability that can add an administrator account via ms/basic/manager/save.do.