CVE-2020-21238: Improper Restriction of Excessive Authentication Attempts

An issue in the user login box of CSCMS v4.0 allows attackers to hijack user accounts via brute force attacks...

CScms Remote Code Execution Vulnerability (CNVD-2021-93911)

CScms Cheng CMS is a diversified content management system. A remote code execution vulnerability exists in the Playsong.php component of CScms version 4.1. An attacker can exploit this vulnerability to execute arbitrary commands...

CVE-2020-22848

A remote code execution RCE vulnerability in the \Playsong.php component of cscms v4.1 allows attackers to execute arbitrary commands...

Remote code execution

A remote code execution RCE vulnerability in the \Playsong.php component of cscms v4.1 allows attackers to execute arbitrary commands...

CVE-2020-22848

CVE-2020-22848 affects cscms v4.1, specifically the Playsong.php component. An RCE vulnerability allows an attacker to execute arbitrary commands on affected systems. The connected documents consistently describe remote code execution via Playsong.php but do not provide specific exploit details, ...

CVE-2020-22848

A remote code execution RCE vulnerability in the \Playsong.php component of cscms v4.1 allows attackers to execute arbitrary commands...

CVE-2020-22848

A remote code execution RCE vulnerability in the \Playsong.php component of cscms v4.1 allows attackers to execute arbitrary commands...

PT-2021-10801

Name of the Vulnerable Software and Affected Versions cscms version 4.1 Description A remote code execution issue in the Playsong.php component allows attackers to execute arbitrary commands. Recommendations For cscms version 4.1, update to a version that fixes the remote code execution issue in...

CVE-2020-22848: Undefined Security Weakness

A remote code execution RCE vulnerability in the \Playsong.php component of cscms v4.1 allows attackers to execute arbitrary commands...

SQL Injection Vulnerability in Cscms of Guilin Chongsheng Network Technology Co.

Cscms is a diversified content management system, the use of PHP5 MYSQL as the technical basis for development, the use of OOP object-oriented approach to the basic operation of the framework to build. Guilin Chongsheng Network Technology Co., Ltd Cscms SQL injection vulnerability, attackers can...

SQL Injection Vulnerability in Cscms

Cscms is a diversified content management system, the use of PHP5 MYSQL as the technical basis for development, the use of OOP object-oriented approach to the basic operation of the framework to build. Cscms has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive...

Command Execution Vulnerability in Cscms Backend

cscms is a diversified content management system, using PHP5 MYSQL as the technical basis for development, using OOP object-oriented approach to the basic operation of the framework to build. Cscms backend command execution vulnerability, attackers can use the vulnerability to obtain control of t...

SQL Injection Vulnerability in CSCMS Frontend

cscms is a diversified content management system, using PHP5 MYSQL as the technical basis for development, using OOP object-oriented approach to the basic operation of the framework to build. CSCMS front-end SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive...

Command Execution Vulnerability in Cscms

Cheng's CMS-cscms is a diversified content management system, using PHP5+MYSQL as the technical basis for development, using the OOP object-oriented approach to build the basic operational framework. Cscms has a command execution vulnerability that can be exploited by attackers to gain control of...

Command Execution Vulnerability in Cscms File of Guilin Chongsheng Network Technology Co.

Cscms is a multi-functional network information management system developed by Chongsheng Network Technology. Cscms file has a command execution vulnerability that can be exploited by an attacker to gain control of the web server...

Arbitrary File Deletion Vulnerability in Cscms of Guilin Chongsheng Network Technology Company Limited (CNVD-2020-47298)

Cscms is a multi-functional network information management system developed by Chongsheng Network Technology. Cscms has an arbitrary file deletion vulnerability that can be exploited by an attacker to delete arbitrary files from the server...

File Upload, Arbitrary File Deletion Vulnerability in CSCMS

CSCMS is a multi-functional network information management system developed by Chongsheng Network Technology. CSCMS file file upload, arbitrary file deletion vulnerability, an attacker can use this vulnerability to obtain server privileges, delete arbitrary files...

Arbitrary File Read Vulnerability in ctcms

Chong Sheng Network Technology has developed Cscms Portal Content Management System, Ctcms Network Video Education Management System, Aggregate Payment, and a Multi-Merchant Entry Card Issuing Platform Management System. ctcms has an arbitrary file read vulnerability, an attacker can exploit the...

xml entity injection vulnerability in ctcms version 2.0.2

Chongsheng Network Technology is an emerging network technology limited company. It has developed Cscms portal content management system, Ctcms network video education management system, polymerization payment, and a multi-merchant card issuance platform management system. ctcms2.0.2 version of t...

SQL Injection Vulnerability in CSCMS Pl***.php File

CSCMS is a multi-functional network information management system developed by Chongsheng Network Technology. SQL injection vulnerability exists in the CSCMS Pl.php file, which can be exploited by attackers to obtain sensitive information...