Cscms@4.2 Security Vulnerabilities and Issues — Cscms@4.2 CVE List

Lucene search

ChshcmsCscms4.2

7 matches found

CVE•added 2022/03/21 10:15 p.m.•64 views

CVE-2022-27090

Cscms Music Portal System v4.2 was discovered to contain a redirection vulnerability via the backurl parameter.

5.4CVSS5.5AI score0.00127EPSS

CVE•added 2022/04/15 6:15 p.m.•59 views

CVE-2022-27368

Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the component dance_Lists.php_zhuan.

7.2CVSS7.2AI score0.00242EPSS

CVE•added 2022/04/15 6:15 p.m.•58 views

CVE-2022-27366

Cscms Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the component dance_Dance.php_hy.

7.2CVSS7.3AI score0.00242EPSS

CVE•added 2022/04/15 6:15 p.m.•57 views

CVE-2022-27365

Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the component dance_Dance.php_del.

7.2CVSS7.2AI score0.00242EPSS

CVE•added 2022/06/09 7:15 p.m.•57 views

CVE-2022-30898

A Cross-site request forgery (CSRF) vulnerability in Cscms music portal system v4.2 allows remote attackers to change the administrator's username and password.

6.5CVSS6.6AI score0.00105EPSS

CVE•added 2022/04/15 6:15 p.m.•56 views

CVE-2022-27367

Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the component dance_Topic.php_del.

7.2CVSS7.2AI score0.00242EPSS

CVE•added 2022/04/15 6:15 p.m.•54 views

CVE-2022-27369

Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the component news_News.php_hy.

7.2CVSS7.2AI score0.00242EPSS