CVE_POC_test

CVEPOCtest Reproducción del CVE-2019-13086 y código experimental del POC Información original del CVE: https://vulners.com/cve/CVE-2019-13086 Entorno de prueba: Arquitectura CSZ CMS + php5.4 + MySQL 5.5 + Apache 2.4 Tipo de vulnerabilidad: Inyección SQL Subida de archivos Breve descripción: En la...

EUVD-2020-14023

Malware in sbrugna...

CVE-2020-21250

CSZ CMS v1.2.4 was discovered to contain an arbitrary file upload vulnerability in the component /core/MYSecurity.php...

CSZ CMS File Upload Vulnerability

CSZ CMS is a PHP-based open source content management system CMS. A file upload vulnerability exists in the v1.2.4 version of CSZ CMS, which originates from the /core/MYSecurity.php component of the product not validating the uploaded file. An attacker can use this vulnerability to upload arbitra...

CVE-2020-21250

CSZ CMS v1.2.4 was discovered to contain an arbitrary file upload vulnerability in the component /core/MYSecurity.php...

Privilege escalation

CSZ CMS v1.2.4 was discovered to contain an arbitrary file upload vulnerability in the component /core/MYSecurity.php...

CVE-2020-21250

CSZ CMS v1.2.4 was discovered to contain an arbitrary file upload vulnerability in the component /core/MYSecurity.php...

Sql injection

core/MYSecurity.php in CSZ CMS 1.2.2 before 2019-06-20 has member/login/check SQL injection by sending a crafted HTTP User-Agent header and omitting the csrfcsz parameter...