CVE-2023-50578

Summary

CVE-2023-50578 is a newly disclosed SQL injection vulnerability affecting Mingsoft MCMS version 5.2.9. Maliciously crafted input in the categoryType parameter of the /content/list.do endpoint can manipulate SQL queries, potentially granting unauthorized access to sensitive data or enabling attackers to execute arbitrary code. This vulnerability poses a significant risk to organizations using this MCMS solution and requires immediate patching to mitigate potential threats.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.