CVE-2020-28102

cscms v4.1 allows for SQL injection via the "jsdel" function...

Sql injection

cscms v4.1 allows for SQL injection via the "pagedel" function...

Sql injection

cscms v4.1 allows for SQL injection via the "jsdel" function...

CVE-2020-28103

CVE-2020-28103 affects cscms v4.1 and enables SQL injection through the page_del/page delete function. Root cause: improper input handling leading to SQL injection. CVSS 3.1 base score 9.8 (CRITICAL), NETWORK, no authentication, no user interaction. Exploitation details are not provided in the co...

CVE-2020-28103

cscms v4.1 allows for SQL injection via the "pagedel" function...

CVE-2020-28103

cscms v4.1 allows for SQL injection via the "pagedel" function...

CVE-2020-28102

cscms v4.1 exposes an SQL injection via the js_del function. Affected product: cscms (CMS). Root cause details are not further disclosed in the provided documents. Impact is indicated as high via CVSS3.1 (CRITICAL) with network access and no user interaction; no remediation details are provided i...

CVE-2020-28102

cscms v4.1 allows for SQL injection via the "jsdel" function...

CVE-2020-28102

cscms v4.1 allows for SQL injection via the "jsdel" function...

PT-2022-8881

Name of the Vulnerable Software and Affected Versions cscms version 4.1 Description The issue allows for SQL injection via the js del function. This enables potential attackers to inject malicious SQL code, which could lead to unauthorized access or manipulation of database content. Recommendatio...

CScms SQL注入漏洞

CScms is a content management system CMS developed on the CI framework. cscms has a security vulnerability that stems from the fact that cscms v4.1 allows SQL injection via the js del function. No detailed vulnerability details are available...

PT-2022-8882

Name of the Vulnerable Software and Affected Versions cscms version 4.1 Description The issue allows for SQL injection via the page del function. This could potentially lead to unauthorized access or manipulation of database content. Recommendations For cscms version 4.1, consider disabling the...

CVE-2020-28103: Improper Neutralization of Special Elements used in an SQL Command

cscms v4.1 allows for SQL injection via the "pagedel" function...

CVE-2020-28102: Improper Neutralization of Special Elements used in an SQL Command

cscms v4.1 allows for SQL injection via the "jsdel" function...

CSCMS has unspecified vulnerabilities

CScms is a content management system CMS developed based on the CI framework. cscms v4.0 is vulnerable due to a lack of effective protection against brute force attacks in the software user login box, which can be exploited by attackers to hijack user accounts via brute force attacks...

CVE-2020-21238

An issue in the user login box of CSCMS v4.0 allows attackers to hijack user accounts via brute force attacks...

Design/Logic Flaw

An issue in the user login box of CSCMS v4.0 allows attackers to hijack user accounts via brute force attacks...

CVE-2020-21238

An issue in the user login box of CSCMS v4.0 allows attackers to hijack user accounts via brute force attacks...

CVE-2020-21238

CVE-2020-21238 affects CSCMS v4.0, with a weakness in the user login box that enables brute-force attacks to hijack user accounts. The issue is documented across multiple sources (NVD entry notes brute-force risk; Red Hat and CNVD mirror the same description). Exploitation status and exact exploi...

PT-2021-10606

Name of the Vulnerable Software and Affected Versions: CSCMS version 4.0 Description: An issue in the user login box allows attackers to hijack user accounts via brute force attacks. Recommendations: For CSCMS version 4.0, consider implementing rate limiting or IP blocking to mitigate the risk of...