Hammery

**Name of the Vulnerable Software and Affected Versions** Mingsoft MCMS version 5.2.9 **Description** A SQL injection issue was discovered in Mingsoft MCMS via the `categoryType` parameter at the "/content/list.do" API endpoint. This allows for potential exploitation. **Recommendations** For Mingsoft MCMS version 5.2.9, as a temporary workaround, consider restricting access to the "/content/list.do" API endpoint or sanitizing the `categoryType` parameter to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.