Mingsoft MCMS 5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/list URI via orderBy parameter.Referenceshttps://gitee.com/mingSoft/MCMS/issues/I54VG0