Lucene search
HistoryAug 11, 2023 - 2:15 p.m.
CVE-2020-36136
cve-2020-36136
sql injection
cskaza
cszcms
security vulnerability
nvd
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
31.9%
SQL Injection vulnerability in cskaza cszcms version 1.2.9, allows attackers to gain sensitive information via pm_sendmail parameter in csz_model.php.
Affected configurations
Node
cskazacszcmsMatch1.2.9
| CPE | Name | Operator | Version |
|---|---|---|---|
| cskaza:cszcms | cskaza cszcms | eq | 1.2.9 |
References
Related
prion
prion
Sql injection
2023-08-11 14:15:00
cnvd
cnvd
CSZCMS SQL Injection Vulnerability (CNVD-2023-64217)
2023-08-15 00:00:00
cvelist
cvelist
CVE-2020-36136
2023-08-11 00:00:00
nvd
nvd
CVE-2020-36136
2023-08-11 14:15:11
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
31.9%
Related for CVE-2020-36136