CVE-2022-29661

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/pic/admin/type/save...

CVE-2022-29661

CVE-2022-29661 affects CSCMS Music Portal System v4.2. It has a blind SQL injection in the id parameter of /admin.php/pic/admin/type/save due to lack of input validation, enabling an attacker to execute SQL statements and potentially exfiltrate data. Root cause: unsanitized id parameter. Impact a...

CVE-2022-29660

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/pic/del...

CVE-2022-29660

CVE-2022-29660 affects CSCMS Music Portal System v4.2. A SQL injection vulnerability exists in the id parameter of /admin.php/pic/admin/pic/del. Root cause: missing input validation for external SQL statements. Impact: allows unauthorized data access/ tampering with the database (as reflected by ...

PT-2022-19769

Name of the Vulnerable Software and Affected Versions CSCMS Music Portal System version 4.2 Description A SQL injection issue was found in the CSCMS Music Portal System via the id parameter at the "/admin.php/pic/admin/lists/zhuan" endpoint. Recommendations For CSCMS Music Portal System version...

PT-2022-19776

Name of the Vulnerable Software and Affected Versions CSCMS Music Portal System version 4.2 Description A blind SQL injection issue was found in the id parameter at the /admin.php/vod/admin/topic/del API endpoint. This allows for potential exploitation. Recommendations For version 4.2, avoid usin...

PT-2022-19777

Name of the Vulnerable Software and Affected Versions CSCMS Music Portal System version 4.2 Description A blind SQL injection issue was found in the id parameter at the /admin.php/Label/page del API endpoint. Recommendations For version 4.2, avoid using the id parameter in the /admin.php/Label/pa...

PT-2022-19773

Name of the Vulnerable Software and Affected Versions CSCMS Music Portal System version 4.2 Description A SQL injection issue was found in the id parameter at the /admin.php/pic/admin/lists/zhuan API endpoint. This allows for potential exploitation. Recommendations For version 4.2, avoid using th...

PT-2022-19778

Name of the Vulnerable Software and Affected Versions CSCMS Music Portal System version 4.2 Description A blind SQL injection issue was found in the CSCMS Music Portal System. This issue is related to the id parameter at the "/admin.php/Label/js del" API endpoint. Recommendations For CSCMS Music...

PT-2022-19782

Name of the Vulnerable Software and Affected Versions CSCMS Music Portal System version 4.2 Description A blind SQL injection issue was discovered in the CSCMS Music Portal System. The issue is related to the id parameter at the "/admin.php/singer/admin/singer/hy" API endpoint. Recommendations Fo...

PT-2022-19774

Name of the Vulnerable Software and Affected Versions CSCMS Music Portal System version 4.2 Description A blind SQL injection issue was found in the CSCMS Music Portal System. The issue is related to the id parameter at the "/admin.php/user/zu del" API endpoint. This allows for potential...

CVE-2022-29667: Improper Neutralization of Special Elements used in an SQL Command

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via /admin.php/pic/admin/pic/hy. This vulnerability is exploited via restoring deleted photos...

CVE-2022-29662: Improper Neutralization of Special Elements used in an SQL Command

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/news/admin/news/save...

CSCMS Music Portal System SQL Injection Vulnerability

CSCMS Music Portal System is a diversified content management system from China Chongsheng Network Technology CSCMS, Inc. A SQL injection vulnerability exists in CSCMS Music Portal System, which originates from the missing id parameter in /admin.php/pic/admin/lists/zhuan validation of external...

CSCMS Music Portal System SQL Injection Vulnerability

CSCMS Music Portal System is a diversified content management system from China Sunseeker Network Technology CSCMS, Inc. A SQL injection vulnerability exists in CSCMS Music Portal System, which stems from the missing validation of the id parameter in /admin.php/Label/pagedel for external input SQ...

CSCMS Music Portal System SQL Injection Vulnerability

CSCMS Music Portal System is a diversified content management system from China Chongsheng Network Technology CSCMS, Inc. A SQL injection vulnerability exists in CSCMS Music Portal System, which originates from the missing id parameter in /admin.php/news/admin/lists/zhuan validation of external...

CSCMS Music Portal System SQL Injection Vulnerability

CSCMS Music Portal System is a diversified content management system of China Chong Sheng Network Technology CSCMS Company. A SQL injection vulnerability exists in the CSCMS Music Portal System due to a lack of validation of the id parameter of /admin.php/user/zudel against externally entered SQL...

CSCMS Music Portal System SQL Injection Vulnerability

CSCMS Music Portal System is a diversified content management system of China Chong Sheng Network Technology CSCMS Company. CSCMS Music Portal System suffers from a SQL injection vulnerability that originates from the id parameter in /admin.php/user/leveldel that lacks validation of externally...

CSCMS Music Portal System SQL Injection Vulnerability

CSCMS Music Portal System is a diversified content management system of China Chong Sheng Network Technology CSCMS Company. CSCMS Music Portal System suffers from a SQL injection vulnerability that originates from the lack of validation of the id parameter of /admin.php/pic/admin/type/plsave for...

CSCMS Music Portal System SQL Injection Vulnerability

CSCMS Music Portal System is a diversified content management system of China Chong Sheng Network Technology CSCMS Company. CSCMS Music Portal System suffers from a SQL injection vulnerability that originates from the lack of validation of the id parameter in /admin.php/vod/admin/topic/del for...