Known Vulnerabilities for Cszcms by Cskaza
Listed below are 6 of the newest known vulnerabilities associated with "Cszcms" by "Cskaza".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2023-41436 json | Cross Site Scripting vulnerability in CSZCMS v.1.3.0 allows a local attacker to execute arbitrary code via a crafted script t... | 5.4 - MEDIUM | 2023-09-16 | 2023-09-20 |
| CVE-2023-34545 json | A SQL injection vulnerability in CSZCMS 1.3.0 allows remote attackers to run arbitrary SQL commands via p parameter or the se... | 9.8 - CRITICAL | 2023-08-09 | 2023-08-11 |
| CVE-2023-6303 json | A SQL injection vulnerability in CSZCMS 1.3.0 allows remote attackers to run arbitrary SQL commands via p parameter or the se... | 4.8 - MEDIUM | 2023-11-27 | 2023-11-30 |
| CVE-2023-6302 json | A SQL injection vulnerability in CSZCMS 1.3.0 allows remote attackers to run arbitrary SQL commands via p parameter or the se... | 7.2 - HIGH | 2023-11-27 | 2023-11-30 |
| CVE-2021-46377 json | There is a front-end sql injection vulnerability in cszcms 1.2.9 via cszcms/controllers/Member.php#viewUser | 9.8 - CRITICAL | 2022-01-27 | 2022-02-02 |
| CVE-2020-36136 json | SQL Injection vulnerability in cskaza cszcms version 1.2.9, allows attackers to gain sensitive information via pm_sendmail pa... | 7.5 - HIGH | 2023-08-11 | 2023-08-15 |