233 matches found
Sql injection
CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcmsadminPluginmanagersetstatus...
Sql injection
CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcmsadminMemberseditUser...
Sql injection
Csz Cms 1.2.2 is vulnerable to SQL Injection via cszcmsadminMembersviewUsers...
Sql injection
CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcmsadminUsersviewUsers...
CVE-2022-27165
CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Plugin_manager_setstatus. The issue arises from unvalidated external input in the affected function, enabling an attacker to execute arbitrary SQL and potentially access sensitive database data. Documented across multiple sources (CNVD...
CVE-2022-27165
CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcmsadminPluginmanagersetstatus...
CVE-2022-27165
CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcmsadminPluginmanagersetstatus...
CVE-2022-27164
CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcmsadminUsersviewUsers...
CVE-2022-27164
CSZ CMS 1.2.2 is vulnerable to SQL Injection in the cszcms_admin_Users_viewUsers function due to lack of input validation. This affects CSZ CMS 1.2.2 and enables attackers to execute arbitrary SQL commands to obtain sensitive database data (per Red Hat, CNVD, CNNVD, and NVD records). The CVE is C...
CVE-2022-27164
CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcmsadminUsersviewUsers...
CVE-2022-27163
CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcmsadminUserseditUser...
CVE-2022-27163
CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Users_editUser. The issue arises from lack of input validation in that function, enabling attackers to execute arbitrary SQL and potentially access sensitive database data. Documented across multiple sources (e.g., CVE-2022-27163 entri...
CVE-2022-27163
CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcmsadminUserseditUser...
CVE-2022-27162
CSZ CMS 1.2.2 is vulnerable to SQL injection via cszcms_admin_Members_editUser, caused by unsanitized input in that endpoint. The issue is documented across multiple sources (including CVE-2022-27162) and is rated High/CRITICAL (CVSS v2 7.5, CVSS v3.1 9.8). Exploitation status and concrete remedi...
CVE-2022-27162
CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcmsadminMemberseditUser...
CVE-2022-27162
CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcmsadminMemberseditUser...
CVE-2022-27161
CSZ CMS 1.2.2 is vulnerable to SQL injection via cszcms_admin_Members_viewUsers. Root cause: lack of validation of externally supplied SQL statements, enabling attackers to execute arbitrary SQL and access sensitive database data. CVSS metrics in public records indicate high-severity impact (C/H/...
CVE-2022-27161
Csz Cms 1.2.2 is vulnerable to SQL Injection via cszcmsadminMembersviewUsers...
CVE-2022-27161
Csz Cms 1.2.2 is vulnerable to SQL Injection via cszcmsadminMembersviewUsers...
CSZ CMS SQL注入漏洞
CSZ CMS is a PHP-based open source content management system CMS. CSZ CMS version 1.2.2 contains a SQL injection vulnerability, which originates from the lack of validation of external input SQL statements in cszcmsadminUsersviewUsers and can be exploited by attackers to execute illegal SQL...