CVE-2026-86667: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in aircheng-org iWebShop-5 up to 5.15. The affected element is the function memberlist of the file controllers/member.php. This manipulation of the argument Search causes sql injection. The attack is possible to be carried out remotely. The exploit has been made...

CVE-2021-46377

There is a front-end sql injection vulnerability in cszcms 1.2.9 via cszcms/controllers/Member.phpviewUser...

PT-2022-12679

Name of the Vulnerable Software and Affected Versions cszcms version 1.2.9 Description The issue is related to a front-end sql injection vulnerability. It affects the cszcms/controllers/Member.php file, specifically the viewUser section. Recommendations For cszcms version 1.2.9, consider...

CVE-2021-46377: Improper Neutralization of Special Elements used in an SQL Command

There is a front-end sql injection vulnerability in cszcms 1.2.9 via cszcms/controllers/Member.phpviewUser...