| Package | Affected versions | Patched versions |
|---|---|---|
| net.mingsoft:ms-mcms | ≤ 5.2.5 | |
| mcms | ≤ 5.2.5 |
Mingsoft MCMS is a Java CMS. Versions prior to and including 5.2.5 contain a file upload vulnerability allowing for a jspx webshell to be uploaded via net.mingsoft.basic.action.web.FileAction#upload, resulting in remote code execution. It is unclear if this issue has been patched.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free