Lucene search
+L

3 matches found

Positive Technologies
Positive Technologies
•added 2022/05/23 12:00 a.m.•5 views

PT-2022-19352

Name of the Vulnerable Software and Affected Versions CSZCMS version 1.3.0 Description The issue allows attackers to execute a Server-Side Request Forgery SSRF which can be leveraged to leak sensitive data via a local file inclusion at "/admin/filemanager/connector/". Recommendations For CSZCMS...

7.5CVSS0.02077EPSS
SaveExploits1References9
CNNVD
CNNVD
•added 2022/05/23 12:00 a.m.•24 views

CSZCMS 代码问题漏洞

CSZCMS is an open source web application that allows managing all content and settings on a website. A security vulnerability exists in CSZCMS version 1.3.0 that originates from the leakage of sensitive data via local files in /admin/filemanager/connector/...

7.5CVSS7.3AI score0.02077EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/23 12:00 a.m.•11 views

CVE-2022-28997: Server-Side Request Forgery (SSRF)

CSZCMS v1.3.0 allows attackers to execute a Server-Side Request Forgery SSRF which can be leveraged to leak sensitive data via a local file inclusion at /admin/filemanager/connector/...

7.5CVSS7.3AI score0.02077EPSS
SaveExploits1References2
Rows per page
Query Builder