CVE-2022-29680

CVE-2022-29680 affects CSCMS Music Portal System v4.2. A blind SQL injection exists in the id parameter of /admin.php/user/zu_del due to lack of input validation, enabling potential unauthorized access to database data. CVSS metrics present: AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H (NVD 3.1) and CVSS2...

CVE-2022-29670

CVE-2022-29670 affects CSCMS Music Portal System v4.2. A SQL injection is exposed via the id parameter on /admin.php/pic/admin/type/del, potentially exposing or altering database data. Several connected sources corroborate the vulnerability; exploitation details or a patch are not provided in the...

CVE-2022-29666

CVE-2022-29666 affects CSCMS Music Portal System v4.2. A SQL injection vulnerability exists in the id parameter of /admin.php/pic/admin/lists/zhuan, caused by inadequate input validation. The CNVD/Red Hat/NVD records describe an ability to execute arbitrary SQL to exfiltrate data. There is no pat...

CVE-2022-29665

Summary of vulnerability (CVE-2022-29665): CSCMS Music Portal System v4.2 contains a SQL injection flaw via the id parameter in the endpoint /admin.php/news/admin/topic/save. The issue is triggered by unsafely constructed external input, enabling an attacker to potentially manipulate database que...

CVE-2022-29664

CVE-2022-29664 affects CSCMS Music Portal System v4.2. A SQL injection vulnerability exists via the id parameter in /admin.php/pic/admin/type/pl_save caused by lack of input validation. Impact described in CNVD/RH notes: an attacker can execute arbitrary SQL to steal sensitive data. CVSSv3.1 base...

CVE-2022-29663

CSCMS Music Portal System v4.2 contains a SQL injection vulnerability in the id parameter of /admin.php/pic/admin/type/hy. The issue arises from lack of input validation, enabling attackers to inject SQL statements to access or exfiltrate database data. Affected product is CSCMS Music Portal Syst...

CVE-2022-29660

CVE-2022-29660 affects CSCMS Music Portal System v4.2. A SQL injection vulnerability exists in the id parameter of /admin.php/pic/admin/pic/del. Root cause: missing input validation for external SQL statements. Impact: allows unauthorized data access/ tampering with the database (as reflected by ...

GSD-2022-1002202 KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs

KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.189 by commit...

GSD-2022-1001091 KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs

KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.3 by commit...

CVE-2022-27365

Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the component danceDance.phpdel...

Sql injection

Cscms Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the component danceDance.phphy...

Sql injection

Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the component danceTopic.phpdel...

Sql injection

Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the component danceDance.phpdel...

CVE-2022-27367

Summary of CVE-2022-27367 (Cscms Music Portal System v4.2): A SQL injection vulnerability exists in the Dance_Topic.php_del component of Cscms Music Portal System v4.2. The vulnerability arises from improper handling of input in the affected function, enabling injection attacks against the databa...

CVE-2022-27369

The CVE-2022-27369 entry concerns Cscms Music Portal System v4.2, with a SQL injection vulnerability in the news_News.php_hy component. The Red Hat, CNVD, CNVD/CNNVD, NVD, and related records consistently describe the same issue: an SQL injection flaw in News-related functionality of Cscms Music ...

CVE-2022-27365

CVE-2022-27365 affects Cscms Music Portal System v4.2, with a SQL injection vulnerability exploitable via the dance_Dance.php_del component. Connected sources (NVD/Red Hat/CNVD/etc.) corroborate a SQLi flaw in CScms that can enable unauthorized data exposure or modification through the vulnerable...

Design/Logic Flaw

Cscms Music Portal System v4.2 was discovered to contain a redirection vulnerability via the backurl parameter...

CVE-2022-27090

CVE-2022-27090 affects CScms Music Portal System v4.2. The issue is a backurl parameter–driven redirection vulnerability. The Connected documents corroborate a redirect flaw but do not provide concrete exploitation details, affected versions beyond v4.2, updated patches, or remediations. Therefor...

Design/Logic Flaw

An authenticated user without any specific authorizations may be able to repeatedly invoke the features command where at a high volume may lead to resource depletion or generate high lock contention. This may result in denial of service and in rare cases could result in id field collisions. This...

GSD-2021-1002464 iio: mma8452: Fix trigger reference couting

iio: mma8452: Fix trigger reference couting This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.165 by commit...