CVE-2020-20913 Information

Description

SQL Injection vulnerability found in Ming-Soft MCMS v.4.7.2 allows a remote attacker to execute arbitrary code via basic_title parameter.

Reference

https://github.com/ming-soft/MCMS/issues/27