chshcms

Records53All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical8CVSS 9.0–10.0

CVSS high34CVSS 7.0–8.9

Exploited now

chshcms records in CISA KEV

No chshcms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Cscms 21 records MEDIUM Cscms Music Portal System 21 records MEDIUM Mccms 11 records HIGH

Records

21 records in Cscms Music Portal System · all components

TI-2022-12085 CVE-2022-29660 · GHSA-ph5w-cfvx-frhm

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability…

MEDIUM 56

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/pic/del.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.11954 Published 2022-05-26 No fix listed CWE-89

TI-2022-12101 CVE-2022-29685 · GHSA-8c5h-pgpw-2c92

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection…

MEDIUM 40

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/User/level_sort.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0097 Published 2022-05-26 No fix listed CWE-89

TI-2022-12093 CVE-2022-29669 · GHSA-w2rq-q2p4-c7qq

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability…

MEDIUM 40

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/news/admin/lists/zhuan.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0097 Published 2022-05-26 No fix listed CWE-89

TI-2022-12092 CVE-2022-29667 · GHSA-rhw5-h3r5-p5x5

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability…

MEDIUM 40

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via /admin.php/pic/admin/pic/hy.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0097 Published 2022-05-26 No fix listed CWE-89

TI-2022-12089 CVE-2022-29664 · GHSA-c57h-5952-cm7p

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability…

MEDIUM 40

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/type/pl_save.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0097 Published 2022-05-26 No fix listed CWE-89

TI-2022-12105 CVE-2022-29689 · GHSA-xhfv-xvjm-pqh5

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection…

LOW 33

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/singer/admin/singer/del.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00957 Published 2022-05-26 No fix listed CWE-89

TI-2022-12104 CVE-2022-29688 · GHSA-v7mp-pvc5-pr33

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection…

LOW 33

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/singer/admin/singer/hy.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00957 Published 2022-05-26 No fix listed CWE-89

TI-2022-12103 CVE-2022-29687 · GHSA-r93x-j3p7-8448

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection…

LOW 33

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/user/level_del.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00957 Published 2022-05-26 No fix listed CWE-89

TI-2022-12102 CVE-2022-29686 · GHSA-3rm2-x64w-wcx9

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection…

LOW 33

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/singer/admin/lists/zhuan.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00957 Published 2022-05-26 No fix listed CWE-89

TI-2022-12100 CVE-2022-29684 · GHSA-7rjc-f79q-gj8v

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection…

LOW 33

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/Label/js_del.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00957 Published 2022-05-26 No fix listed CWE-89

TI-2022-12099 CVE-2022-29683 · GHSA-329x-5gjj-9v6c

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection…

LOW 33

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/Label/page_del.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00957 Published 2022-05-26 No fix listed CWE-89

TI-2022-12098 CVE-2022-29682 · GHSA-679x-682p-m39r

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection…

LOW 33

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/vod/admin/topic/del.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00957 Published 2022-05-26 No fix listed CWE-89

TI-2022-12097 CVE-2022-29681 · GHSA-5qpw-8p73-jm26

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection…

LOW 33

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/Links/del.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00957 Published 2022-05-26 No fix listed CWE-89

TI-2022-12096 CVE-2022-29680 · GHSA-rpg7-hqjg-pxxj

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection…

LOW 33

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/user/zu_del.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00957 Published 2022-05-26 No fix listed CWE-89

TI-2022-12095 CVE-2022-29676 · GHSA-rpgm-pm3h-88m4

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability…

LOW 33

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/lists/zhuan.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00957 Published 2022-05-26 No fix listed CWE-89

TI-2022-12094 CVE-2022-29670 · GHSA-7hcq-j54w-m8hw

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability…

LOW 33

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/type/del.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00957 Published 2022-05-26 No fix listed CWE-89

TI-2022-12091 CVE-2022-29666 · GHSA-qxrp-frj5-r7g8

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability…

LOW 33

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/lists/zhuan.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00957 Published 2022-05-26 No fix listed CWE-89

TI-2022-12090 CVE-2022-29665 · GHSA-59xr-758c-9487

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability…

LOW 33

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/news/admin/topic/save.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00847 Published 2022-05-26 No fix listed CWE-89

TI-2022-12088 CVE-2022-29663 · GHSA-6482-pqp2-2q5g

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability…

LOW 33

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/type/hy.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00957 Published 2022-05-26 No fix listed CWE-89

TI-2022-12087 CVE-2022-29662 · GHSA-qg88-7w37-mvw6

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability…

LOW 33

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/news/admin/news/save.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00847 Published 2022-05-26 No fix listed CWE-89

TI-2022-12086 CVE-2022-29661 · GHSA-qvw2-2c73-2479

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection…

LOW 33

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/pic/admin/type/save.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00957 Published 2022-05-26 No fix listed CWE-89

Open these records in search →