CSCMS Music Portal System SQL Injection Vulnerability (CNVD-2022-45895)

CSCMS Music Portal System is a diversified content management system from China Sunseeker Network Technology CSCMS, Inc. A SQL injection vulnerability exists in CSCMS Music Portal System, which stems from the missing validation of the id parameter in /admin.php/Label/pagedel for external input SQ...

PT-2022-19777

Name of the Vulnerable Software and Affected Versions CSCMS Music Portal System version 4.2 Description A blind SQL injection issue was found in the id parameter at the /admin.php/Label/page del API endpoint. Recommendations For version 4.2, avoid using the id parameter in the /admin.php/Label/pa...