Vendors / Cskaza Records 6 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 2
Exploited now Cskaza records in CISA KEV No Cskaza vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 72
SQL Injection vulnerability in cskaza cszcms version 1.2.9, allows attackers to gain sensitive information via pm_sendmail parameter in csz_model.php.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00642 · Published 2023-08-11 · No fix listed CWE-89
Priority HIGH 65
A vulnerability was found in CSZCMS 1.3.0 and classified as critical.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00876 · Published 2023-11-27 · No fix listed CWE-275
Priority MEDIUM 58
Cross Site Scripting vulnerability in CSZCMS v.1.3.0 allows a local attacker to execute arbitrary code via a crafted script to the Additional Meta Tag parameter in the Pages Content Menu component.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00505 · Published 2023-09-15 · No fix listed CWE-79
Priority MEDIUM 50
A SQL injection vulnerability in CSZCMS 1.3.0 allows remote attackers to run arbitrary SQL commands via p parameter or the search URL.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00821 · Published 2023-08-09 · No fix listed CWE-89
Priority MEDIUM 44
There is a front-end sql injection vulnerability in cszcms 1.2.9 via cszcms/controllers/Member.php#viewUser
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00956 · Published 2022-01-27 · No fix listed CWE-89
Priority LOW 23
A vulnerability was found in CSZCMS 1.3.0.
CVSS 3.1 MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00605 · Published 2023-11-27 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
2 2 2 0 0
THREATIST.IORead the docs