CVE-2021-46377

There is a front-end sql injection vulnerability in cszcms 1.2.9 via cszcms/controllers/Member.phpviewUser...

CVE-2021-46377: Improper Neutralization of Special Elements used in an SQL Command

There is a front-end sql injection vulnerability in cszcms 1.2.9 via cszcms/controllers/Member.phpviewUser...

SQL Injection Vulnerability in cszcms (CNVD-2021-39092)

cszcms is an open source web application that allows to manage all the content and settings on the website. A SQL injection vulnerability exists in cszcms. An attacker can exploit the vulnerability to obtain sensitive information about the database...

SQL Injection Vulnerability in cszcms

cszcms is an open source content management system. cszcms has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

CVE-2021-3224

A stored cross-site scripting XSS vulnerability in cszcms 1.2.9 exists in /admin/pages/new via the content parameter...

CVE-2021-3224

A stored cross-site scripting XSS vulnerability in cszcms 1.2.9 exists in /admin/pages/new via the content parameter...

CVE-2021-3224

A stored cross-site scripting XSS vulnerability in cszcms 1.2.9 exists in /admin/pages/new via the content parameter...

Cross site scripting

A stored cross-site scripting XSS vulnerability in cszcms 1.2.9 exists in /admin/pages/new via the content parameter...

CVE-2021-3224

CSZ CMS 1.2.9 contains a stored XSS in /admin/pages/new via the content parameter. This CVE (CVE-2021-3224) is consistently described across multiple feeds (NVD, CNVD, Red Hat, CNVD CNVD, etc.) as a stored XSS vulnerability in CSZ CMS. The core issue is input in the content field being reflected ...

CVE-2021-3224

A stored cross-site scripting XSS vulnerability in cszcms 1.2.9 exists in /admin/pages/new via the content parameter...

CVE-2021-3224: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in cszcms 1.2.9 exists in /admin/pages/new via the content parameter...

Exploit for SQL Injection in Cszcms Csz_Cms

CVEPOCtest Reproduction of the CVE-2019-13086 vulnerabilit...

Arbitrary File Deletion Vulnerability in cszcms-1.2.1

CSZCMS is an open source web application that allows to manage all the content and settings on a website. An arbitrary file deletion vulnerability exists in cszcms-1.2.1, which can be exploited by an attacker to delete arbitrary files on the server when deleting an avatar...