CVE-2023-5029

Summary

CVE-2023-5029 is a newly disclosed critical vulnerability affecting mccms version 2.6. The issue lies in the processing of the input "1" in the file "/category/order/hits/copyright/46/finish/1/list/1". This input manipulation results in SQL injection, allowing unauthorized access to data. The vulnerability identifier is VDB-239871 and the exploit has already been made public, increasing the risk for potential attacks. Users are strongly advised to apply the necessary patches or upgrades to mitigate this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.