CVE-2022-29666: Improper Neutralization of Special Elements used in an SQL Command

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/lists/zhuan...

CVE-2022-29683: Improper Neutralization of Special Elements used in an SQL Command

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/Label/pagedel...

CVE-2022-29661: Improper Neutralization of Special Elements used in an SQL Command

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/pic/admin/type/save...

CVE-2022-29685: Improper Neutralization of Special Elements used in an SQL Command

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/User/levelsort...

CVE-2022-29684: Improper Neutralization of Special Elements used in an SQL Command

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/Label/jsdel...

CVE-2022-29662: Improper Neutralization of Special Elements used in an SQL Command

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/news/admin/news/save...

CVE-2022-29669: Improper Neutralization of Special Elements used in an SQL Command

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/news/admin/lists/zhuan...

CVE-2022-29681: Improper Neutralization of Special Elements used in an SQL Command

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/Links/del...

CVE-2022-29667: Improper Neutralization of Special Elements used in an SQL Command

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via /admin.php/pic/admin/pic/hy. This vulnerability is exploited via restoring deleted photos...

CVE-2022-29688: Improper Neutralization of Special Elements used in an SQL Command

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/singer/admin/singer/hy...

CVE-2022-29670: Improper Neutralization of Special Elements used in an SQL Command

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/type/del...

CSCMS Music Portal System SQL注入漏洞

CSCMS Music Portal System is a diversified content management system of China Chong Sheng Network Technology CSCMS Company. A SQL injection vulnerability exists in the CSCMS Music Portal System due to a lack of validation of the id parameter of /admin.php/user/zudel against externally entered SQL...

CVE-2021-40317: Improper Neutralization of Special Elements used in an SQL Command

Piwigo 11.5.0 is affected by a SQL injection vulnerability via admin.php and the id parameter...

CVE-2022-29687: Improper Neutralization of Special Elements used in an SQL Command

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/user/leveldel...

CVE-2022-29676: Improper Neutralization of Special Elements used in an SQL Command

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/lists/zhuan...

CVE-2022-29689: Improper Neutralization of Special Elements used in an SQL Command

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/singer/admin/singer/del...

CVE-2022-29686: Improper Neutralization of Special Elements used in an SQL Command

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/singer/admin/lists/zhuan...

CVE-2022-29665: Improper Neutralization of Special Elements used in an SQL Command

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/news/admin/topic/save...

CVE-2022-29664: Improper Neutralization of Special Elements used in an SQL Command

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/type/plsave...

Piwigo SQL注入漏洞

Piwigo is a Web-based open source photo gallery software. The software includes features such as image management, image categorization and permission management. A SQL injection vulnerability exists in Piwigo version 11.5.0, which stems from a lack of validation of the id parameter in admin.php...