CSCMS Music Portal System SQL Injection Vulnerability (CNVD-2022-45895)

CSCMS Music Portal System is a diversified content management system from China Sunseeker Network Technology CSCMS, Inc. A SQL injection vulnerability exists in CSCMS Music Portal System, which stems from the missing validation of the id parameter in /admin.php/Label/pagedel for external input SQ...

PT-2022-19777

Name of the Vulnerable Software and Affected Versions CSCMS Music Portal System version 4.2 Description A blind SQL injection issue was found in the id parameter at the /admin.php/Label/page del API endpoint. Recommendations For version 4.2, avoid using the id parameter in the /admin.php/Label/pa...

CVE-2020-28103

cscms v4.1 allows for SQL injection via the "pagedel" function...

PT-2022-8882

Name of the Vulnerable Software and Affected Versions cscms version 4.1 Description The issue allows for SQL injection via the page del function. This could potentially lead to unauthorized access or manipulation of database content. Recommendations For cscms version 4.1, consider disabling the...