Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-103374
HistoryOct 31, 2021 - 12:00 a.m.

CSZ CMS File Upload Vulnerability

2021-10-3100:00:00
China National Vulnerability Database
www.cnvd.org.cn
6
csz cms
file upload
vulnerability
my_security.php
php-based
open source

EPSS

0.003

Percentile

68.9%

CSZ CMS is a PHP-based open source content management system (CMS). CSZ CMS has a file upload vulnerability in version v1.2.4, which stems from the product’s /core/MY_Security.php component that does not validate uploaded files. An attacker can upload arbitrary files through this vulnerability.

EPSS

0.003

Percentile

68.9%