An issue was discovered in Cscms V4.1.8. There is a CSRF vulnerability that can modify a website's basic configuration via upload/admin.php/setting/save.
6.5CVSS
6.5AI Score
0.001EPSS
Cscms 4 allows CSRF for creating a member via upload/admin.php/user/save, authenticating vip members via upload/admin.php/user/init/tid and upload/admin.php/user/init/rzid, and creating a super administrator and web editor via upload/admin.php/sys/save.
8.8CVSS
8.6AI Score
0.001EPSS
6.1CVSS
5.9AI Score
0.001EPSS
CScms 4.1 allows arbitrary file upload by (for example) adding the php extension to the default filetype list (gif, jpg, png), and then providing a .php pathname within fileurl JSON data.
9.8CVSS
9.3AI Score
0.008EPSS
\upload\plugins\sys\admin\Setting.php in CScms 4.1 allows CSRF via admin.php/setting/ftp_save.
8.8CVSS
8.6AI Score
0.001EPSS
CScms 4.1 allows arbitrary directory deletion via a dir=..\ substring to plugins\sys\admin\Plugins.php.
7.5CVSS
7.4AI Score
0.002EPSS
CScms 4.1 allows remote code execution, as demonstrated by 1');eval($_POST[cmd]);# in Web Name to upload\plugins\sys\Install.php.
9.8CVSS
9.5AI Score
0.05EPSS
Cscms 4.1.8 allows admin.php/links/save CSRF to add, modify, or delete friend links.
8.1CVSS
8AI Score
0.001EPSS
An issue was discovered in Cscms 4.1.0. There is an admin.php/pay CSRF vulnerability that can change the payment account to redirect funds.
6.5CVSS
6.4AI Score
0.001EPSS
An issue in the user login box of CSCMS v4.0 allows attackers to hijack user accounts via brute force attacks.
9.8CVSS
9.3AI Score
0.003EPSS
A remote code execution (RCE) vulnerability in the \Playsong.php component of cscms v4.1 allows attackers to execute arbitrary commands.
9.8CVSS
9.8AI Score
0.008EPSS
9.8CVSS
9.9AI Score
0.002EPSS
9.8CVSS
9.9AI Score
0.002EPSS
Cscms Music Portal System v4.2 was discovered to contain a redirection vulnerability via the backurl parameter.
5.4CVSS
5.5AI Score
0.001EPSS
Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the component dance_Dance.php_del.
7.2CVSS
7.2AI Score
0.001EPSS
Cscms Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the component dance_Dance.php_hy.
7.2CVSS
7.3AI Score
0.001EPSS
Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the component dance_Topic.php_del.
7.2CVSS
7.2AI Score
0.001EPSS
Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the component dance_Lists.php_zhuan.
7.2CVSS
7.2AI Score
0.001EPSS
Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the component news_News.php_hy.
7.2CVSS
7.2AI Score
0.001EPSS
Cscms 4.1 is vulnerable to SQL Injection. Log into the background, open the song module, create a new song, delete it to the recycle bin, and SQL injection security problems will occur when emptying the recycle bin.
8.8CVSS
9AI Score
0.001EPSS
A Cross-site request forgery (CSRF) vulnerability in Cscms music portal system v4.2 allows remote attackers to change the administrator's username and password.
6.5CVSS
6.6AI Score
0.001EPSS