TI-2023-05786 CVE-2023-6303 · GHSA-4rp6-9jgj-798p
CSZCMS Site Settings Page cross site scripting
Priority LOW 23
A vulnerability was found in CSZCMS 1.3.0.
Vulnerabilities
6 records
TI-2023-05785 CVE-2023-6302 · GHSA-pm4r-gcmf-cvwq
CSZCMS File Manager Page templates permission
Priority HIGH 65
A vulnerability was found in CSZCMS 1.3.0 and classified as critical.
TI-2023-21977 CVE-2023-41436 · GHSA-8w5w-hw88-g4v5
Cross Site Scripting vulnerability in CSZCMS v.1.3.0 allows a local attacker to execute…
Priority MEDIUM 58
Cross Site Scripting vulnerability in CSZCMS v.1.3.0 allows a local attacker to execute arbitrary code via a crafted script to the Additional Meta Tag parameter in the Pages Content Menu component.
TI-2020-18462 CVE-2020-36136 · GHSA-mvpx-2gmp-26qc
SQL Injection vulnerability in cskaza cszcms version 1.2.9, allows attackers to gain…
Priority HIGH 72
SQL Injection vulnerability in cskaza cszcms version 1.2.9, allows attackers to gain sensitive information via pm_sendmail parameter in csz_model.php.
TI-2023-17311 CVE-2023-34545 · GHSA-c8qx-m9vc-2488
A SQL injection vulnerability in CSZCMS 1.3.0 allows remote attackers to run arbitrary…
Priority MEDIUM 50
A SQL injection vulnerability in CSZCMS 1.3.0 allows remote attackers to run arbitrary SQL commands via p parameter or the search URL.
TI-2021-21202 CVE-2021-46377 · GHSA-f979-4qm9-qvgj
There is a front-end sql injection vulnerability in cszcms 1.2.9 via cszcms/controllers/Member.php#viewUser
Priority MEDIUM 44
There is a front-end sql injection vulnerability in cszcms 1.2.9 via cszcms/controllers/Member.php#viewUser