Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2989▼ 87 respecto a la semana anterior

Críticas / altas1458▲ 97 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)353▼ 157 respecto a la semana anterior

21 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2022-29689	Modificada	Alta (7.2)	0.94%	—	Chshcms Cscms Music Portal System	26/5/2022	17/6/2026	CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/singer/admin/singer/del.
CVE-2022-29688	Modificada	Alta (7.2)	0.94%	—	Chshcms Cscms Music Portal System	26/5/2022	17/6/2026	CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/singer/admin/singer/hy.
CVE-2022-29687	Modificada	Alta (7.2)	0.94%	—	Chshcms Cscms Music Portal System	26/5/2022	17/6/2026	CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/user/level_del.
CVE-2022-29686	Modificada	Alta (7.2)	0.94%	—	Chshcms Cscms Music Portal System	26/5/2022	17/6/2026	CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/singer/admin/lists/zhuan.
CVE-2022-29685	Modificada	Alta (8.8)	0.95%	—	Chshcms Cscms Music Portal System	26/5/2022	17/6/2026	CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/User/level_sort.
CVE-2022-29684	Modificada	Alta (7.2)	0.94%	—	Chshcms Cscms Music Portal System	26/5/2022	17/6/2026	CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/Label/js_del.
CVE-2022-29683	Modificada	Alta (7.2)	0.94%	—	Chshcms Cscms Music Portal System	26/5/2022	17/6/2026	CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/Label/page_del.
CVE-2022-29682	Modificada	Alta (7.2)	0.94%	—	Chshcms Cscms Music Portal System	26/5/2022	17/6/2026	CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/vod/admin/topic/del.
CVE-2022-29681	Modificada	Alta (7.2)	0.94%	—	Chshcms Cscms Music Portal System	26/5/2022	17/6/2026	CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/Links/del.
CVE-2022-29680	Modificada	Alta (7.2)	0.94%	—	Chshcms Cscms Music Portal System	26/5/2022	17/6/2026	CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/user/zu_del.
CVE-2022-29676	Modificada	Alta (7.2)	0.94%	—	Chshcms Cscms Music Portal System	26/5/2022	17/6/2026	CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/lists/zhuan.
CVE-2022-29670	Modificada	Alta (7.2)	0.94%	—	Chshcms Cscms Music Portal System	26/5/2022	17/6/2026	CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/type/del.
CVE-2022-29669	Modificada	Alta (8.8)	0.95%	—	Chshcms Cscms Music Portal System	26/5/2022	17/6/2026	CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/news/admin/lists/zhuan.
CVE-2022-29667	Modificada	Alta (8.8)	0.95%	—	Chshcms Cscms Music Portal System	26/5/2022	17/6/2026	CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via /admin.php/pic/admin/pic/hy. This vulnerability is exploited via restoring deleted photos.
CVE-2022-29666	Modificada	Alta (7.2)	0.94%	—	Chshcms Cscms Music Portal System	26/5/2022	17/6/2026	CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/lists/zhuan.
CVE-2022-29665	Modificada	Alta (7.2)	0.83%	—	Chshcms Cscms Music Portal System	26/5/2022	17/6/2026	CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/news/admin/topic/save.
CVE-2022-29664	Modificada	Alta (8.8)	0.95%	—	Chshcms Cscms Music Portal System	26/5/2022	17/6/2026	CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/type/pl_save.
CVE-2022-29663	Modificada	Alta (7.2)	0.94%	—	Chshcms Cscms Music Portal System	26/5/2022	17/6/2026	CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/type/hy.
CVE-2022-29662	Modificada	Alta (7.2)	0.83%	—	Chshcms Cscms Music Portal System	26/5/2022	17/6/2026	CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/news/admin/news/save.
CVE-2022-29661	Modificada	Alta (7.2)	0.94%	—	Chshcms Cscms Music Portal System	26/5/2022	17/6/2026	CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/pic/admin/type/save.
CVE-2022-29660	Modificada	Crítica (9.8)	12%	—	Chshcms Cscms Music Portal System	26/5/2022	17/6/2026	CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/pic/del.