-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| net.mingsoft:ms-mcms | maven | < 5.1 | 5.1 |
Miggo AIRoot Cause AnalysisThe vulnerability report explicitly shows the search handler method at '/{searchId}/search' endpoint processes the 'basic_title' parameter. The provided code snippet demonstrates direct use of request parameters (including basic_title) for database operations without visible sanitization. SQLMap results confirm successful injection through this parameter. The controller method's handling of raw user input matches the CWE-89 SQL injection pattern of unfiltered parameter usage in SQL commands.
JavaJavaOngoing coverage of React2Shell