← All advisories

Medium severity6.5NVD Advisory· Published Feb 20, 2024· Updated Jun 17, 2026

CVE-2024-25428

CVE-2024-25428

Description

SQL Injection vulnerability in MRCMS v3.1.2 allows attackers to run arbitrary system commands via the status parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Mrcms/Mrcms2 versions
cpe:2.3:a:mrcms:mrcms:3.1.2:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:mrcms:mrcms:3.1.2:*:*:*:*:*:*:*
- (no CPE)
MRC/MRCMSllm-create
Range: =3.1.2

Patches

Vulnerability mechanics

References

1

github.com/wuweiit/mushroom/issues/19nvdExploitIssue TrackingVendor Advisory

News mentions

0

No linked articles in our index yet.

CVE-2024-25428 · Medium · VYPR