Lucene search
+L

354 matches found

Cvelist
Cvelist
added 2022/05/26 1:27 p.m.29 views

CVE-2022-29660

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/pic/del...

10AI score0.11623EPSS
SaveExploits1References1
CVE
CVE
added 2022/05/26 1:27 p.m.55 views

CVE-2022-29660

CVE-2022-29660 affects CSCMS Music Portal System v4.2. A SQL injection vulnerability exists in the id parameter of /admin.php/pic/admin/pic/del. Root cause: missing input validation for external SQL statements. Impact: allows unauthorized data access/ tampering with the database (as reflected by ...

9.8CVSS9.7AI score0.11623EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2022/05/26 12:0 a.m.6 views

CSCMS Music Portal System SQL注入漏洞

CSCMS Music Portal System is a diversified content management system of China Chong Sheng Network Technology CSCMS Company. CSCMS Music Portal System suffers from a SQL injection vulnerability that originates from the id parameter in /admin.php/user/leveldel that lacks validation of externally...

7.2CVSS6.1AI score0.00915EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/05/26 12:0 a.m.5 views

CSCMS Music Portal System SQL注入漏洞

CSCMS Music Portal System is a diversified content management system from China Chongsheng Network Technology CSCMS, Inc. A SQL injection vulnerability exists in CSCMS Music Portal System, which originates from the missing id parameter in /admin.php/pic/admin/lists/zhuan validation of external...

7.2CVSS6.1AI score0.00915EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/05/26 12:0 a.m.4 views

CSCMS Music Portal System SQL注入漏洞

CSCMS Music Portal System is a diversified content management system from China Chongsheng Network Technology CSCMS, Inc. A SQL injection vulnerability exists in CSCMS Music Portal System, which originates from the missing id parameter in /admin.php/news/admin/lists/zhuan validation of external...

8.8CVSS6.1AI score0.00928EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/05/26 12:0 a.m.4 views

CSCMS Music Portal System SQL注入漏洞

CSCMS Music Portal System is a diversified content management system of China Chong Sheng Network Technology CSCMS Company. CSCMS Music Portal System suffers from a SQL injection vulnerability that originates from the lack of validation of the id parameter in /admin.php/vod/admin/topic/del for...

7.2CVSS6.1AI score0.00915EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/05/26 12:0 a.m.3 views

CSCMS Music Portal System SQL注入漏洞

CSCMS Music Portal System is a diversified content management system of China Chong Sheng Network Technology CSCMS Company. CSCMS Music Portal System suffers from a SQL injection vulnerability that originates from the lack of validation of the id parameter in /admin.php/singer/admin/singer/del fo...

7.2CVSS6.1AI score0.00915EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/05/26 12:0 a.m.5 views

CSCMS Music Portal System SQL注入漏洞

CSCMS Music Portal System is a diversified content management system of China Chong Sheng Network Technology CSCMS Company. CSCMS Music Portal System suffers from a SQL injection vulnerability that originates from the lack of validation of the id parameter of /admin.php/pic/admin/type/plsave for...

8.8CVSS6.1AI score0.00928EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/05/26 12:0 a.m.5 views

CSCMS Music Portal System SQL注入漏洞

CSCMS Music Portal System is a diversified content management system from China Sunseeker Network Technology CSCMS, Inc. A SQL injection vulnerability exists in CSCMS Music Portal System, which stems from the missing validation of the id parameter in /admin.php/Label/pagedel for external input SQ...

7.2CVSS6.1AI score0.00915EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/05/26 12:0 a.m.5 views

CSCMS Music Portal System SQL注入漏洞

CSCMS Music Portal System is a diversified content management system of China Chong Sheng Network Technology CSCMS Company. A SQL injection vulnerability exists in the CSCMS Music Portal System due to a lack of validation of the id parameter of /admin.php/user/zudel against externally entered SQL...

7.2CVSS6AI score0.00915EPSS
SaveExploits1References2
OSV
OSV
added 2022/05/04 3:15 p.m.5 views

CVE-2022-28552

Cscms 4.1 is vulnerable to SQL Injection. Log into the background, open the song module, create a new song, delete it to the recycle bin, and SQL injection security problems will occur when emptying the recycle bin...

8.8CVSS5.8AI score0.00845EPSS
SaveExploits1References1
NVD
NVD
added 2022/05/04 3:15 p.m.16 views

CVE-2022-28552

Cscms 4.1 is vulnerable to SQL Injection. Log into the background, open the song module, create a new song, delete it to the recycle bin, and SQL injection security problems will occur when emptying the recycle bin...

8.8CVSS0.00845EPSS
SaveExploits1References1
Prion
Prion
added 2022/05/04 3:15 p.m.11 views

Sql injection

Cscms 4.1 is vulnerable to SQL Injection. Log into the background, open the song module, create a new song, delete it to the recycle bin, and SQL injection security problems will occur when emptying the recycle bin...

6.5CVSS9AI score0.00845EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/05/04 2:52 p.m.23 views

CVE-2022-28552

Cscms 4.1 is vulnerable to SQL Injection. Log into the background, open the song module, create a new song, delete it to the recycle bin, and SQL injection security problems will occur when emptying the recycle bin...

9.3AI score0.00845EPSS
SaveExploits1References1
CVE
CVE
added 2022/05/04 2:52 p.m.75 views

CVE-2022-28552

CScms 4.1 is vulnerable to SQL Injection in the backend during the recycle-bin empty operation after creating a song in the Song module; the issue occurs when deleting a song to the recycle bin and then emptying it. The connected sources confirm the affected workflow but do not provide concrete r...

8.8CVSS9AI score0.00845EPSS
SaveExploits1References1Affected Software1
CNVD
CNVD
added 2022/04/19 12:0 a.m.11 views

CScms SQL Injection Vulnerability (CNVD-2022-33154)

CScms is a content management system CMS developed based on the CI framework.Cscms Music Portal System v4.2 is vulnerable to SQL injection, which can be exploited by attackers to conduct injection attacks via the component danceDance.phphy...

7.2CVSS4.2AI score0.00834EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/04/19 12:0 a.m.14 views

CScms SQL Injection Vulnerability (CNVD-2022-33153)

CScms is a content management system CMS developed based on the CI framework. cscms Music Portal System v4.2 is vulnerable to SQL injection, which can be exploited by attackers to conduct injection attacks via the component danceTopic.phpdel...

7.2CVSS4.2AI score0.00834EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/04/19 12:0 a.m.12 views

CScms SQL Injection Vulnerability (CNVD-2022-33151)

CScms is a Content Management System CMS developed based on the CI framework.Cscms Music Portal System v4.2 is vulnerable to SQL injection, which can be exploited by attackers via the component newsNews.phphy...

7.2CVSS4.3AI score0.00857EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/04/19 12:0 a.m.18 views

CScms SQL Injection Vulnerability (CNVD-2022-33155)

CScms is a content management system CMS developed based on the CI framework. CScms is vulnerable to SQL injection, which can be exploited by attackers to conduct injection attacks via the component danceDance.phpdel...

7.2CVSS4.4AI score0.00942EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/04/19 12:0 a.m.13 views

CScms SQL Injection Vulnerability (CNVD-2022-33152)

CScms is a content management system CMS developed based on the CI framework. cscms Music Portal System v4.2 is vulnerable to SQL injection, which can be exploited by attackers via the component danceLists.phpzhuan...

7.2CVSS4.1AI score0.00834EPSS
SaveExploits1References1
Rows per page
Query Builder