6 matches found
EUVD-2025-30910
Malicious code in bioql PyPI...
CVE-2025-29083
SQL Injection vulnerability in CSZ-CMS v.1.3.0 allows a remote attacker to execute arbitrary code via the execSqlFile function in the PluginManager.php file...
CVE-2025-29084
SQL Injection vulnerability in CSZ-CMS v.1.3.0 allows a remote attacker to execute arbitrary code via the execSqlFile function in the Upgrade.php file...
CVE-2025-29083
SQL Injection vulnerability in CSZ-CMS v.1.3.0 allows a remote attacker to execute arbitrary code via the execSqlFile function in the PluginManager.php file...
CVE-2025-29083
SQL Injection vulnerability in CSZ-CMS v.1.3.0 allows a remote attacker to execute arbitrary code via the execSqlFile function in the PluginManager.php file...
CVE-2025-29084
A SQL Injection vulnerability exists in CSZ-CMS v.1.3.0 , an open-source web content management system. The flaw resides in the execSqlFile function within the Upgrade.php file, where unauthenticated input is improperly neutralized. This allows a remote attacker to manipulate SQL queries to achie...