CVE-2023-34545

A SQL injection vulnerability in CSZCMS 1.3.0 allows remote attackers to run arbitrary SQL commands via p parameter or the search URL...

CVE-2023-34545

A SQL injection vulnerability in CSZCMS 1.3.0 allows remote attackers to run arbitrary SQL commands via p parameter or the search URL...

CVE-2023-34545

A SQL injection vulnerability in CSZCMS 1.3.0 allows remote attackers to run arbitrary SQL commands via p parameter or the search URL...

Sql injection

A SQL injection vulnerability in CSZCMS 1.3.0 allows remote attackers to run arbitrary SQL commands via p parameter or the search URL...

CVE-2023-34545

CSZCMS 1.3.0 has a SQL injection vulnerability exploitable via the p parameter or the search URL, allowing remote attackers to execute arbitrary SQL commands. The CVSSv3.1 base score is 9.8 (CRITICAL) with impact to confidentiality, integrity, and availability. The documents do not specify a vend...

CVE-2023-34545

A SQL injection vulnerability in CSZCMS 1.3.0 allows remote attackers to run arbitrary SQL commands via p parameter or the search URL...

PT-2023-24915

Name of the Vulnerable Software and Affected Versions CSZCMS version 1.3.0 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the p parameter or the search URL. Recommendations For CSZCMS version 1.3.0, consider restricting access to the p parameter an...

CSZCMS SQL Injection Vulnerability

CSZCMS is an open source web application that allows to manage all the content and settings on the website. A SQL injection vulnerability exists in CSZCMS version 1.3.0 that stems from the application's lack of validation of externally entered SQL statements. A remote attacker can exploit the...

CVE-2023-34545: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in CSZCMS 1.3.0 allows remote attackers to run arbitrary SQL commands via p parameter or the search URL...

CVE-2022-28997

CSZCMS v1.3.0 allows attackers to execute a Server-Side Request Forgery SSRF which can be leveraged to leak sensitive data via a local file inclusion at /admin/filemanager/connector/...

CVE-2022-28997

CSZCMS v1.3.0 allows attackers to execute a Server-Side Request Forgery SSRF which can be leveraged to leak sensitive data via a local file inclusion at /admin/filemanager/connector/...

Server side request forgery (ssrf)

CSZCMS v1.3.0 allows attackers to execute a Server-Side Request Forgery SSRF which can be leveraged to leak sensitive data via a local file inclusion at /admin/filemanager/connector/...

CVE-2022-28997

CSZCMS v1.3.0 is affected by a Server-Side Request Forgery (SSRF) vulnerability that can be leveraged to leak sensitive data via a local file inclusion at /admin/filemanager/connector/. The issue, documented in CVE-2022-28997 and reported across multiple sources (NVD, Red Hat, CVE List, etc.), in...

CVE-2022-28997

CSZCMS v1.3.0 allows attackers to execute a Server-Side Request Forgery SSRF which can be leveraged to leak sensitive data via a local file inclusion at /admin/filemanager/connector/...

PT-2022-19352

Name of the Vulnerable Software and Affected Versions CSZCMS version 1.3.0 Description The issue allows attackers to execute a Server-Side Request Forgery SSRF which can be leveraged to leak sensitive data via a local file inclusion at "/admin/filemanager/connector/". Recommendations For CSZCMS...

CSZCMS Code Issues and Vulnerabilities

CSZCMS is an open source web application that allows managing all content and settings on a website. A security vulnerability exists in CSZCMS version 1.3.0 that originates from the leakage of sensitive data via local files in /admin/filemanager/connector/...

CVE-2022-28997: Server-Side Request Forgery (SSRF)

CSZCMS v1.3.0 allows attackers to execute a Server-Side Request Forgery SSRF which can be leveraged to leak sensitive data via a local file inclusion at /admin/filemanager/connector/...

CVE-2022-27164

CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcmsadminUsersviewUsers...

PT-2022-18260

Name of the Vulnerable Software and Affected Versions CSZ CMS version 1.2.2 Description The issue is related to SQL Injection via the cszcms admin Users viewUsers endpoint. This allows for potential unauthorized access to sensitive data. No information is provided about the estimated number of...

PT-2022-18258

Name of the Vulnerable Software and Affected Versions CSZ CMS version 1.2.2 Description The issue is related to SQL Injection, which can be exploited via the cszcms admin Members editUser function. This allows for potential unauthorized access to sensitive data. Recommendations For CSZ CMS versio...