Sql injection

2022-05-2614:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

37.9%

JSON

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via /admin.php/pic/admin/pic/hy. This vulnerability is exploited via restoring deleted photos.

CPENameOperatorVersion
cscms_music_portal_systemeq4.2

CPE	Name	Operator	Version
	cscms_music_portal_system	eq	4.2

References

github.com/chshcms/cscms/issues/26

0.001 Low

EPSS

Percentile

37.9%

JSON

Related for PRION:CVE-2022-29667