CVE-2022-27164

CSZ CMS 1.2.2 is vulnerable to SQL Injection in the cszcms_admin_Users_viewUsers function due to lack of input validation. This affects CSZ CMS 1.2.2 and enables attackers to execute arbitrary SQL commands to obtain sensitive database data (per Red Hat, CNVD, CNNVD, and NVD records). The CVE is C...

CVE-2022-27164

CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcmsadminUsersviewUsers...

CVE-2022-27164

CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcmsadminUsersviewUsers...

CVE-2022-27163

CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcmsadminUserseditUser...

CVE-2022-27163

CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Users_editUser. The issue arises from lack of input validation in that function, enabling attackers to execute arbitrary SQL and potentially access sensitive database data. Documented across multiple sources (e.g., CVE-2022-27163 entri...

CVE-2022-27163

CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcmsadminUserseditUser...

CVE-2022-27162

CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcmsadminMemberseditUser...

CVE-2022-27162

CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcmsadminMemberseditUser...

CVE-2022-27162

CSZ CMS 1.2.2 is vulnerable to SQL injection via cszcms_admin_Members_editUser, caused by unsanitized input in that endpoint. The issue is documented across multiple sources (including CVE-2022-27162) and is rated High/CRITICAL (CVSS v2 7.5, CVSS v3.1 9.8). Exploitation status and concrete remedi...

CVE-2022-27161

Csz Cms 1.2.2 is vulnerable to SQL Injection via cszcmsadminMembersviewUsers...

CVE-2022-27161

CSZ CMS 1.2.2 is vulnerable to SQL injection via cszcms_admin_Members_viewUsers. Root cause: lack of validation of externally supplied SQL statements, enabling attackers to execute arbitrary SQL and access sensitive database data. CVSS metrics in public records indicate high-severity impact (C/H/...

CVE-2022-27161

Csz Cms 1.2.2 is vulnerable to SQL Injection via cszcmsadminMembersviewUsers...

CVE-2022-27165: Improper Neutralization of Special Elements used in an SQL Command

CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcmsadminPluginmanagersetstatus...

CVE-2022-27164: Improper Neutralization of Special Elements used in an SQL Command

CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcmsadminUsersviewUsers...

CVE-2022-27162: Improper Neutralization of Special Elements used in an SQL Command

CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcmsadminMemberseditUser...

CVE-2022-27163: Improper Neutralization of Special Elements used in an SQL Command

CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcmsadminUserseditUser...

CVE-2022-27161: Improper Neutralization of Special Elements used in an SQL Command

Csz Cms 1.2.2 is vulnerable to SQL Injection via cszcmsadminMembersviewUsers...

PT-2022-18258

Name of the Vulnerable Software and Affected Versions CSZ CMS version 1.2.2 Description The issue is related to SQL Injection, which can be exploited via the cszcms admin Members editUser function. This allows for potential unauthorized access to sensitive data. Recommendations For CSZ CMS versio...

PT-2022-18259

Name of the Vulnerable Software and Affected Versions CSZ CMS version 1.2.2 Description The issue is related to SQL Injection via the cszcms admin Users editUser function. This allows for potential exploitation. Recommendations For CSZ CMS version 1.2.2, as a temporary workaround, consider...

CSZ CMS SQL injection vulnerability

CSZ CMS is a PHP-based open source content management system CMS. CSZ CMS version 1.2.2 contains a SQL injection vulnerability, which originates from the lack of validation of external input SQL statements in cszcmsadminMemberseditUser and can be exploited by attackers to execute illegal SQL...