3 matches found
CVE-2022-28552
Cscms 4.1 is vulnerable to SQL Injection. Log into the background, open the song module, create a new song, delete it to the recycle bin, and SQL injection security problems will occur when emptying the recycle bin.
CVE-2020-28102
cscms v4.1 allows for SQL injection via the "js_del" function.
CVE-2020-28103
cscms v4.1 allows for SQL injection via the "page_del" function.