← All advisories

Medium severity6.5NVD Advisory· Published Feb 20, 2024· Updated Jun 17, 2026

CVE-2024-25428

CVE-2024-25428

Description

SQL Injection vulnerability in MRCMS v3.1.2 allows attackers to run arbitrary system commands via the status parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

MRC/MRCMSllm-create
Range: =3.1.2
Mrcms/Mrcmscpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- cpe:2.3:a:mrcms:mrcms:3.1.2:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

github.com/wuweiit/mushroom/issues/19nvdExploitIssue TrackingVendor Advisory

News mentions

0

No linked articles in our index yet.