CVE-2020-28102

cscms v4.1 allows for SQL injection via the "jsdel" function...

CVE-2020-28102

cscms v4.1 allows for SQL injection via the "jsdel" function...

Sql injection

cscms v4.1 allows for SQL injection via the "jsdel" function...

Sql injection

cscms v4.1 allows for SQL injection via the "pagedel" function...

CVE-2020-28103

cscms v4.1 allows for SQL injection via the "pagedel" function...

CVE-2020-28103

CVE-2020-28103 affects cscms v4.1 and enables SQL injection through the page_del/page delete function. Root cause: improper input handling leading to SQL injection. CVSS 3.1 base score 9.8 (CRITICAL), NETWORK, no authentication, no user interaction. Exploitation details are not provided in the co...

CVE-2020-28102

cscms v4.1 allows for SQL injection via the "jsdel" function...

CVE-2020-28102

cscms v4.1 exposes an SQL injection via the js_del function. Affected product: cscms (CMS). Root cause details are not further disclosed in the provided documents. Impact is indicated as high via CVSS3.1 (CRITICAL) with network access and no user interaction; no remediation details are provided i...

CScms SQL注入漏洞

CScms is a content management system CMS developed on the CI framework. cscms has a security vulnerability that stems from the fact that cscms v4.1 allows SQL injection via the js del function. No detailed vulnerability details are available...

CSCMS has unspecified vulnerabilities

CScms is a content management system CMS developed based on the CI framework. cscms v4.0 is vulnerable due to a lack of effective protection against brute force attacks in the software user login box, which can be exploited by attackers to hijack user accounts via brute force attacks...

CVE-2020-21238

An issue in the user login box of CSCMS v4.0 allows attackers to hijack user accounts via brute force attacks...

Design/Logic Flaw

An issue in the user login box of CSCMS v4.0 allows attackers to hijack user accounts via brute force attacks...

CVE-2020-21238

An issue in the user login box of CSCMS v4.0 allows attackers to hijack user accounts via brute force attacks...

CVE-2020-21238

CVE-2020-21238 affects CSCMS v4.0, with a weakness in the user login box that enables brute-force attacks to hijack user accounts. The issue is documented across multiple sources (NVD entry notes brute-force risk; Red Hat and CNVD mirror the same description). Exploitation status and exact exploi...

CScms Remote Code Execution Vulnerability (CNVD-2021-93911)

CScms Cheng CMS is a diversified content management system. A remote code execution vulnerability exists in the Playsong.php component of CScms version 4.1. An attacker can exploit this vulnerability to execute arbitrary commands...

CVE-2020-22848

A remote code execution RCE vulnerability in the \Playsong.php component of cscms v4.1 allows attackers to execute arbitrary commands...

Remote code execution

A remote code execution RCE vulnerability in the \Playsong.php component of cscms v4.1 allows attackers to execute arbitrary commands...

CVE-2020-22848

A remote code execution RCE vulnerability in the \Playsong.php component of cscms v4.1 allows attackers to execute arbitrary commands...

CVE-2020-22848

CVE-2020-22848 affects cscms v4.1, specifically the Playsong.php component. An RCE vulnerability allows an attacker to execute arbitrary commands on affected systems. The connected documents consistently describe remote code execution via Playsong.php but do not provide specific exploit details, ...

SQL Injection Vulnerability in Cscms of Guilin Chongsheng Network Technology Co.

Cscms is a diversified content management system, the use of PHP5 MYSQL as the technical basis for development, the use of OOP object-oriented approach to the basic operation of the framework to build. Guilin Chongsheng Network Technology Co., Ltd Cscms SQL injection vulnerability, attackers can...