CVE-2021-26776

CSZ CMS 1.2.9 is affected by a cross-site scripting XSS vulnerability in multiple pages through the field name...

CVE-2021-26776

CSZ CMS 1.2.9 is affected by a cross-site scripting XSS vulnerability in multiple pages through the field name...

CVE-2021-26776

CSZ CMS 1.2.9 is affected by a cross-site scripting XSS vulnerability in multiple pages through the field name...

Cross site scripting

CSZ CMS 1.2.9 is affected by a cross-site scripting XSS vulnerability in multiple pages through the field name...

CVE-2021-26776

CSZ CMS 1.2.9 is affected by a cross-site scripting XSS vulnerability in multiple pages through the field name...

CVE-2021-26776

CVE-2021-26776 affects CSZ CMS 1.2.9 with a cross-site scripting (XSS) vulnerability in multiple pages via field names. Root cause and exact exploitable conditions are not detailed in the provided documents, but NVD lists CVSS v3.1 base score 5.4 (MEDIUM) and CVSS v2 base score 3.5 (LOW). Connect...

CSZ CMS Cross-Site Scripting Vulnerability

CSZ CMS is an open source content management system. A stored cross-site scripting vulnerability exists in /admin/pages/new in CSZ CMS 1.2.9. An attacker can exploit this vulnerability via the content parameter to conduct a cross-site scripting attack...

CSZ CMS 1.2.9 - Multiple Cross-Site Scripting

Exploit Title: CSZ CMS 1.2.9 - Multiple Cross-Site Scripting Date: 2020/12/28 Exploit Author: SunCSR Vendor Homepage: https://www.cszcms.com/ Software Link: https://github.com/cskaza/cszcms Version: 1.2.9 Tested on: CSZ CMS 1.2.9 1. Reflected XSS Go to url...

CSZ CMS 1.2.9 Cross Site Scripting

Exploit Title: CSZ CMS 1.2.9 - Multiple Cross-Site Scripting Date: 2020/12/28 Exploit Author: SunCSR Vendor Homepage: https://www.cszcms.com/ Software Link: https://github.com/cskaza/cszcms Version: 1.2.9 Tested on: CSZ CMS 1.2.9 1. Reflected XSS Go to url...

CSZ CMS 1.2.7 HTML Injection

Exploit Title: CSZ CMS 1.2.7 - 'title' HTML Injection Exploit Author: Metin Yunus Kandemir Vendor Homepage: https://www.cszcms.com/ Software Link: https://sourceforge.net/projects/cszcms/ Version: v1.2.7 Description: Authenticated user can inject hyperlink to Backend System Dashboard and Member...

CSZ CMS 1.2.7 - (title) HTML Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: CSZ CMS 1.2.7 - 'title' HTML Injection Exploit Author: Metin Yunus Kandemir Vendor Homepage: https://www.cszcms.com/ Software Link: https://sourceforge.net/projects/cszcms/ Version: v1.2.7 Description: Authenticated user can...

CSZ CMS 1.2.7 - Persistent Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: CSZ CMS 1.2.7 - Persistent Cross-Site Scripting Exploit Author: Metin Yunus Kandemir Vendor Homepage: https://www.cszcms.com/ Software Link: https://sourceforge.net/projects/cszcms/ Version: v1.2.7 Description: Unauthorized user...

CSZ CMS 1.2.7 - 'title' HTML Injection

Exploit Title: CSZ CMS 1.2.7 - 'title' HTML Injection Exploit Author: Metin Yunus Kandemir Vendor Homepage: https://www.cszcms.com/ Software Link: https://sourceforge.net/projects/cszcms/ Version: v1.2.7 Description: Authenticated user can inject hyperlink to Backend System Dashboard and Member...

CSZ CMS 1.2.7 - Persistent Cross-Site Scripting

Exploit Title: CSZ CMS 1.2.7 - Persistent Cross-Site Scripting Exploit Author: Metin Yunus Kandemir Vendor Homepage: https://www.cszcms.com/ Software Link: https://sourceforge.net/projects/cszcms/ Version: v1.2.7 Description: Unauthorized user that has access private message can embed Javascript...

CSZ CMS 1.2.7 Cross Site Scripting

Exploit Title: CSZ CMS 1.2.7 - Persistent Cross-Site Scripting Exploit Author: Metin Yunus Kandemir Vendor Homepage: https://www.cszcms.com/ Software Link: https://sourceforge.net/projects/cszcms/ Version: v1.2.7 Description: Unauthorized user that has access private message can embed Javascript...

Exploit for SQL Injection in Cszcms Csz_Cms

CVEPOCtest Reproduction of the CVE-2019-13086 vulnerabilit...

CSZ CMS Arbitrary File Upload Vulnerability

CSZ CMS is an open source content management system. An arbitrary file upload vulnerability exists in CSZ CMS 1.2.3. An attacker can exploit this vulnerability by accessing photo/upload/2019/ URI to achieve remote code execution...

CVE-2019-15524

CSZ CMS 1.2.3 allows arbitrary file upload, as demonstrated by a .php file to admin/filemanager in the File Management Module, which leads to remote code execution by visiting a photo/upload/2019/ URI...

Remote code execution

CSZ CMS 1.2.3 allows arbitrary file upload, as demonstrated by a .php file to admin/filemanager in the File Management Module, which leads to remote code execution by visiting a photo/upload/2019/ URI...

CVE-2019-15524

CSZ CMS 1.2.3 contains an arbitrary file upload vulnerability in the File Management Module (admin/filemanager) that enables remote code execution via the URI photo/upload/2019/. Several sources (CNVD, RH/Red Hat, PRION, CVE listings) corroborate RCE potential; no explicit patch/version is provid...