CVE_POC_test

CVEPOCtest CVE-2019-13086 취약점의 재현 및 PoC 실험 코드 원본 CVE 정보: https://vulners.com/cve/CVE-2019-13086 실험 환경: CSZ CMS 아키텍처 + php5.4 + MySQL 5.5 + Apache 2.4 취약점 유형: SQL 인젝션 취약점, 파일 업로드 취약점 간단한 설명: \cszcms\cszcms\core\MYSecurity.php의 csrfshowerror 함수에서 HTTP 패킷의 User-Agent 필드는 데이터베이스 쿼리 문에 추가되기 전에 어떠한 내용...

EUVD-2020-14023

Malware in sbrugna...

CVE-2020-21250

CSZ CMS v1.2.4 was discovered to contain an arbitrary file upload vulnerability in the component /core/MYSecurity.php...

CSZ CMS File Upload Vulnerability

CSZ CMS is a PHP-based open source content management system CMS. A file upload vulnerability exists in the v1.2.4 version of CSZ CMS, which originates from the /core/MYSecurity.php component of the product not validating the uploaded file. An attacker can use this vulnerability to upload arbitra...

CVE-2020-21250

CSZ CMS v1.2.4 was discovered to contain an arbitrary file upload vulnerability in the component /core/MYSecurity.php...

Privilege escalation

CSZ CMS v1.2.4 was discovered to contain an arbitrary file upload vulnerability in the component /core/MYSecurity.php...

CVE-2020-21250

CSZ CMS v1.2.4 was discovered to contain an arbitrary file upload vulnerability in the component /core/MYSecurity.php...

CVE-2020-21250: Improper Neutralization of Special Elements used in an SQL Command

CSZ CMS v1.2.4 was discovered to contain an arbitrary file upload vulnerability in the component /core/MYSecurity.php...

Sql injection

core/MYSecurity.php in CSZ CMS 1.2.2 before 2019-06-20 has member/login/check SQL injection by sending a crafted HTTP User-Agent header and omitting the csrfcsz parameter...

CVE-2019-13086: Improper Neutralization of Special Elements used in an SQL Command

core/MYSecurity.php in CSZ CMS 1.2.2 before 2019-06-20 has member/login/check SQL injection by sending a crafted HTTP User-Agent header and omitting the csrfcsz parameter...