Cszcms Security Vulnerabilities and Issues — Cszcms CVE List

Lucene search

CskazaCszcms

2 matches found

CVE•added 2023/08/11 2:15 p.m.•35 views

CVE-2020-36136

SQL Injection vulnerability in cskaza cszcms version 1.2.9, allows attackers to gain sensitive information via pm_sendmail parameter in csz_model.php.

7.5CVSS7.8AI score0.00049EPSS

CVE•added 2023/08/09 2:15 p.m.•24 views

CVE-2023-34545

A SQL injection vulnerability in CSZCMS 1.3.0 allows remote attackers to run arbitrary SQL commands via p parameter or the search URL.

9.8CVSS9.7AI score0.00293EPSS