Lucene search
K

15 matches found

RedhatCVE
RedhatCVE
added 2025/12/12 10:17 p.m.2 views

CVE-2024-58307

CSZCMS 1.3.0 contains an authenticated SQL injection vulnerability in the members view functionality that allows authenticated attackers to manipulate database queries. Attackers can inject malicious SQL code through the view parameter to potentially execute time-based blind SQL injection attacks...

9.3CVSS8.1AI score0.0013EPSS
Exploits1References1
EUVD
EUVD
added 2025/12/12 12:30 a.m.3 views

EUVD-2024-55326

CSZCMS 1.3.0 contains an authenticated SQL injection vulnerability in the members view functionality that allows authenticated attackers to manipulate database queries. Attackers can inject malicious SQL code through the view parameter to potentially execute time-based blind SQL injection attacks...

9.3CVSS7.5AI score0.0013EPSS
Exploits1References5
OSV
OSV
added 2025/12/11 10:15 p.m.1 views

CVE-2024-58307

CSZCMS 1.3.0 contains an authenticated SQL injection vulnerability in the members view functionality that allows authenticated attackers to manipulate database queries. Attackers can inject malicious SQL code through the view parameter to potentially execute time-based blind SQL injection attacks...

8.8CVSS5.9AI score
Exploits0References4
NVD
NVD
added 2025/12/11 10:15 p.m.4 views

CVE-2024-58307

CSZCMS 1.3.0 contains an authenticated SQL injection vulnerability in the members view functionality that allows authenticated attackers to manipulate database queries. Attackers can inject malicious SQL code through the view parameter to potentially execute time-based blind SQL injection attacks...

9.3CVSS0.0013EPSS
Exploits1References4
Cvelist
Cvelist
added 2025/12/11 9:41 p.m.16 views

CVE-2024-58307 CSZCMS 1.3.0 Authenticated SQL Injection via Members View Endpoint

CSZCMS 1.3.0 contains an authenticated SQL injection vulnerability in the members view functionality that allows authenticated attackers to manipulate database queries. Attackers can inject malicious SQL code through the view parameter to potentially execute time-based blind SQL injection attacks...

9.3CVSS0.0013EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2025/12/11 9:41 p.m.3 views

CVE-2024-58307 CSZCMS 1.3.0 Authenticated SQL Injection via Members View Endpoint

CSZCMS 1.3.0 contains an authenticated SQL injection vulnerability in the members view functionality that allows authenticated attackers to manipulate database queries. Attackers can inject malicious SQL code through the view parameter to potentially execute time-based blind SQL injection attacks...

9.3CVSS7.7AI score0.0013EPSS
Exploits1References4
CVE
CVE
added 2025/12/11 9:41 p.m.6 views

CVE-2024-58307

CSZCMS 1.3.0 is affected by an authenticated SQL injection in the members view endpoint (view parameter). The vulnerability allows an authenticated attacker to manipulate queries, enabling time-based blind SQL injection and potential extraction of database information. Affected component: members...

9.3CVSS7.7AI score0.0013EPSS
Exploits1References4Affected Software1
Positive Technologies
Positive Technologies
added 2025/12/11 12:0 a.m.5 views

PT-2025-50759

Name of the Vulnerable Software and Affected Versions CSZCMS version 1.3.0 Description The software contains an authenticated SQL injection issue in the members view functionality. Authenticated attackers can manipulate database queries by injecting malicious SQL code through the view parameter...

9.3CVSS7.6AI score0.0013EPSS
Exploits1References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2017-7389

Malware in sbrugna...

9.8CVSS9.5AI score0.02342EPSS
Exploits4References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-52300

Malicious code in bioql PyPI...

7.2CVSS7.1AI score0.00274EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2022/04/12 4:15 p.m.2 views

CVE-2022-27161

Csz Cms 1.2.2 is vulnerable to SQL Injection via cszcmsadminMembersviewUsers...

9.8CVSS6AI score0.00264EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/04/12 12:0 a.m.1 views

CSZ CMS SQL注入漏洞

CSZ CMS is a PHP-based open source content management system CMS. cszcmsadminMembersviewUsers version 1.2.2 contains a SQL injection vulnerability, which originates from the lack of validation of externally entered SQL statements and can be exploited by attackers to execute illegal SQL commands t...

9.8CVSS8.7AI score0.00264EPSS
Exploits1References2
CNVD
CNVD
added 2017/11/03 12:0 a.m.1 views

Sokial Social Network Script SQL Injection Vulnerability

Sokial Social Network Script is a set of social networking site scripts. The script is used to create social network sites with content management, multi-language support and more. A SQL injection vulnerability exists in Sokial Social Network Script version 1.0. The vulnerability can be exploited...

9.8CVSS8.2AI score0.02342EPSS
Exploits4References1
OSV
OSV
added 2017/10/29 6:29 a.m.3 views

CVE-2017-15973

Sokial Social Network Script 1.0 allows SQL Injection via the id parameter to admin/membersview.php...

9.8CVSS5.8AI score
Exploits0References2
CVE
CVE
added 2017/10/29 6:0 a.m.56 views

CVE-2017-15973

CVE-2017-15973 affects Sokial Social Network Script 1.0. Multiple connected sources confirm a SQL Injection vulnerability reachable via the id parameter in admin/members_view.php. The issue stems from unvalidated input used in SQL queries, enabling attackers to craft malicious id values. Reported...

9.8CVSS9.8AI score0.02342EPSS
Exploits4References2Affected Software1
Rows per page
Query Builder