A ready-made attack for a flaw in Mingsoft MCMS is now public
KROMSE explanation
Mingsoft MCMS has a security flaw (CVE-2021-44868). The official record says: A problem was found in ming-soft MCMS v5.1. There is a sql injection vulnerability in /ms/cms/content/list.do
Not confirmed yet, but attack code is public, so attacks often follow within days.
Anyone running Mingsoft MCMS.
- Install the maker's update for Mingsoft MCMS as soon as it is out.
- Not sure if you use it? KROMSE can check your product for free.
