GHSA-7qw4-9r68-2rmx

ghsaUSosv

mingSoft MCMS File Upload vulnerability

view advisory published 2024-02-05Licence: CC-BY-4.0

File Upload vulnerability in MCMS 5.3.5 allows attackers to upload arbitrary files via crafted POST request to /ms/file/upload.do.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2024-22567US	high8.8	17.8% (97th)	—	2024-02-05
File Upload vulnerability in MCMS 5.3.5 allows attackers to upload arbitrary files via crafted POST request to /ms/file/upload.do.

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.