Search Results (3 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-88414 1 Mcms 1 Mcms 2026-09-23 N/A
MCMS 6.1.1 through 6.2.1 contains a SQL injection vulnerability in the PageAction.verify endpoint (GET /ms/mdiy/page/verify.do).
CVE-2026-88416 1 Mcms 1 Mcms 2026-09-23 N/A
MCMS 6.1.1 through 6.2.1 has a SQL injection vulnerability in the custom model/form import feature.
CVE-2007-6344 1 Mcms 1 Easy Web Make 2026-04-23 N/A
Directory traversal vulnerability in modules/cms/index.php in Mcms Easy Web Make 1.3, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the template parameter.