CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

2 matches found

Prion•added 2019/06/30 5:15 p.m.•23 views

Sql injection

core/MYSecurity.php in CSZ CMS 1.2.2 before 2019-06-20 has member/login/check SQL injection by sending a crafted HTTP User-Agent header and omitting the csrfcsz parameter...

7.5CVSS9.7AI score0.31996EPSS

SaveExploits2References1Affected Software1

Rapid7 Vulnerability Database (full)•added 2019/06/30 12:00 a.m.•9 views

CVE-2019-13086: Improper Neutralization of Special Elements used in an SQL Command

core/MYSecurity.php in CSZ CMS 1.2.2 before 2019-06-20 has member/login/check SQL injection by sending a crafted HTTP User-Agent header and omitting the csrfcsz parameter...

9.8CVSS5.8AI score0.31996EPSS

SaveExploits2References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by