Priority MEDIUM 48
CScms 4.1 allows remote code execution, as demonstrated by 1');eval($_POST[cmd]);# in Web Name to upload\plugins\sys\Install.php.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03233 · Published 2018-09-17 · No fix listed CWE-94
Priority MEDIUM 47
A remote code execution (RCE) vulnerability in the \Playsong.php component of cscms v4.1 allows attackers to execute arbitrary commands.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02874 · Published 2021-08-30 · No fix listed
Priority MEDIUM 45
cscms v4.1 allows for SQL injection via the "js_del" function.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01253 · Published 2022-01-11 · No fix listed CWE-89
Priority MEDIUM 45
CScms 4.1 allows arbitrary file upload by (for example) adding the php extension to the default filetype list (gif, jpg, png), and then providing a .php pathname within fileurl JSON data.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01491 · Published 2018-09-08 · No fix listed CWE-434
Priority MEDIUM 44
cscms v4.1 allows for SQL injection via the "page_del" function.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01133 · Published 2022-01-11 · No fix listed CWE-89
Priority MEDIUM 44
An issue in the user login box of CSCMS v4.0 allows attackers to hijack user accounts via brute force attacks.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0097 · Published 2021-12-27 · No fix listed CWE-307
Priority MEDIUM 40
Cscms 4.1 is vulnerable to SQL Injection.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00859 · Published 2022-05-04 · No fix listed CWE-89
Priority LOW 39
\upload\plugins\sys\admin\Setting.php in CScms 4.1 allows CSRF via admin.php/setting/ftp_save.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.00518 · Published 2018-09-08 · No fix listed CWE-352
Priority LOW 39
Cscms 4 allows CSRF for creating a member via upload/admin.php/user/save, authenticating vip members via upload/admin.php/user/init/tid and upload/admin.php/user/init/rzid, and creating a super administrator and web edit…
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.00494 · Published 2018-09-04 · No fix listed CWE-352
Priority LOW 36
Cscms 4.1.8 allows admin.php/links/save CSRF to add, modify, or delete friend links.
CVSS 3.0HIGH 8.1· Network · No auth · User interaction · EPSS 0.00453 · Published 2019-01-24 · No fix listed CWE-352
Priority LOW 36
CScms 4.1 allows arbitrary directory deletion via a dir=..\\ substring to plugins\sys\admin\Plugins.php.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01412 · Published 2018-09-17 · No fix listed CWE-22
Priority LOW 33
Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the component news_News.php_hy.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00871 · Published 2022-04-15 · No fix listed CWE-89
Priority LOW 33
Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the component dance_Lists.php_zhuan.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00847 · Published 2022-04-15 · No fix listed CWE-89
Priority LOW 33
Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the component dance_Topic.php_del.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00847 · Published 2022-04-15 · No fix listed CWE-89
Priority LOW 33
Cscms Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the component dance_Dance.php_hy.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00847 · Published 2022-04-15 · No fix listed CWE-89
Priority LOW 33
Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the component dance_Dance.php_del.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00957 · Published 2022-04-15 · No fix listed CWE-89
Priority LOW 30
A Cross-site request forgery (CSRF) vulnerability in Cscms music portal system v4.2 allows remote attackers to change the administrator's username and password.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00581 · Published 2022-06-09 · No fix listed CWE-352
Priority LOW 29
An issue was discovered in Cscms 4.1.0.
CVSS 3.0MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00506 · Published 2019-03-07 · No fix listed CWE-352
Priority LOW 29
An issue was discovered in Cscms V4.1.8.
CVSS 3.0MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00447 · Published 2018-09-02 · No fix listed CWE-352
Priority LOW 28
\upload\plugins\sys\Install.php in CScms 4.1 has XSS via the site name.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00705 · Published 2018-09-08 · No fix listed CWE-79
Priority LOW 25
Cscms Music Portal System v4.2 was discovered to contain a redirection vulnerability via the backurl parameter.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00412 · Published 2022-03-21 · No fix listed CWE-601
THREATIST.IORead the docs