{ "id": "CVE-2024-25428", "sourceIdentifier": "cve@mitre.org", "published": "2024-02-20T22:15:08.727", "lastModified": "2024-02-20T22:15:08.727", "vulnStatus": "Received", "descriptions": [ { "lang": "en", "value": "SQL Injection vulnerability in MRCMS v3.1.2 allows attackers to run arbitrary system commands via the status parameter." } ], "metrics": {}, "references": [ { "url": "https://github.com/wuweiit/mushroom/issues/19", "source": "cve@mitre.org" } ] }