PT-2022-19768

Name of the Vulnerable Software and Affected Versions CSCMS Music Portal System version 4.2 Description A SQL injection issue was found in the CSCMS Music Portal System via the id parameter at the "/admin.php/news/admin/topic/save" API endpoint. This allows for potential exploitation...

PT-2022-19772

Name of the Vulnerable Software and Affected Versions CSCMS Music Portal System version 4.2 Description A SQL injection issue was found in the CSCMS Music Portal System. The vulnerability is exploited via the id parameter at the "/admin.php/pic/admin/type/del" API endpoint. Recommendations For...

PT-2022-19771

Name of the Vulnerable Software and Affected Versions CSCMS Music Portal System version 4.2 Description A SQL injection issue was found in the CSCMS Music Portal System via the id parameter at the "/admin.php/news/admin/lists/zhuan" API endpoint. Recommendations For CSCMS Music Portal System...

PT-2022-19781

Name of the Vulnerable Software and Affected Versions CSCMS Music Portal System version 4.2 Description A blind SQL injection issue was found in the CSCMS Music Portal System. The issue is related to the id parameter at the "/admin.php/user/level del" API endpoint. This allows for potential...

PT-2022-19780

Name of the Vulnerable Software and Affected Versions CSCMS Music Portal System version 4.2 Description A blind SQL injection issue was discovered in the CSCMS Music Portal System. The issue is related to the id parameter at the "/admin.php/singer/admin/lists/zhuan" API endpoint. Recommendations...

PT-2022-19763

Name of the Vulnerable Software and Affected Versions CSCMS Music Portal System version 4.2 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/admin.php/pic/admin/pic/del" API endpoint. Recommendations For CSCMS Mus...

PT-2022-19766

Name of the Vulnerable Software and Affected Versions CSCMS Music Portal System version 4.2 Description A SQL injection issue was found in the CSCMS Music Portal System. The issue is related to the id parameter at the "/admin.php/pic/admin/type/hy" endpoint. This allows for potential SQL injectio...

PT-2022-19779

Name of the Vulnerable Software and Affected Versions CSCMS Music Portal System version 4.2 Description A blind SQL injection issue was found in the id parameter at the /admin.php/User/level sort API endpoint. This allows for potential exploitation. Recommendations For version 4.2, avoid using th...

PT-2022-19770

Name of the Vulnerable Software and Affected Versions CSCMS Music Portal System version 4.2 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the "/admin.php/pic/admin/pic/hy" API endpoint by restoring deleted photos. Recommendations For...

PT-2022-19783

Name of the Vulnerable Software and Affected Versions CSCMS Music Portal System version 4.2 Description A blind SQL injection issue was found in the id parameter at the /admin.php/singer/admin/singer/del API endpoint. This allows for potential exploitation. Recommendations For version 4.2, avoid...

PT-2022-19764

Name of the Vulnerable Software and Affected Versions CSCMS Music Portal System version 4.2 Description A blind SQL injection issue was found in the id parameter at the /admin.php/pic/admin/type/save API endpoint. Recommendations For version 4.2, avoid using the id parameter in the...

PT-2022-19765

Name of the Vulnerable Software and Affected Versions CSCMS Music Portal System version 4.2 Description A SQL injection issue was found in the CSCMS Music Portal System via the id parameter at the "/admin.php/news/admin/news/save" API endpoint. This allows for potential exploitation of the system...

CVE-2022-29665: Improper Neutralization of Special Elements used in an SQL Command

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/news/admin/topic/save...

CVE-2022-29667: Improper Neutralization of Special Elements used in an SQL Command

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via /admin.php/pic/admin/pic/hy. This vulnerability is exploited via restoring deleted photos...

CVE-2022-29663: Improper Neutralization of Special Elements used in an SQL Command

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/type/hy...

CVE-2022-29661: Improper Neutralization of Special Elements used in an SQL Command

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/pic/admin/type/save...

PT-2022-19767

Name of the Vulnerable Software and Affected Versions CSCMS Music Portal System version 4.2 Description A SQL injection issue was found in the CSCMS Music Portal System. The vulnerability can be exploited via the id parameter at the "/admin.php/pic/admin/type/pl save" API endpoint. Recommendation...

CVE-2022-29688: Improper Neutralization of Special Elements used in an SQL Command

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/singer/admin/singer/hy...

CVE-2022-29686: Improper Neutralization of Special Elements used in an SQL Command

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/singer/admin/lists/zhuan...

CVE-2022-29685: Improper Neutralization of Special Elements used in an SQL Command

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/User/levelsort...