Cskaza
Cskaza Cszcms: vulnerabilities and CVEs
Cskaza Cszcms has 6 published vulnerabilities, 0 of them in the last 12 months. 2 are rated critical and 0 are listed by CISA as actively exploited.
CVEs6
Last 12 months0
Critical2
Actively exploited0
All vulnerabilities in the catalogue →⭐ Follow this technology
Latest vulnerabilities
| CVE | Severity | EPSS | Active exploitation | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-6303 | Medium (4.8) | 0.60% | — | Nov 27, 2023 | A vulnerability was found in CSZCMS 1.3.0. It has been classified as problematic. This affects an unknown part of the file /admin/settings/ of the component Site Settings Page. The manipulation of the argument… |
| CVE-2023-6302 | High (7.2) | 0.88% | — | Nov 27, 2023 | A vulnerability was found in CSZCMS 1.3.0 and classified as critical. Affected by this issue is some unknown functionality of the file \views\templates of the component File Manager Page. The manipulation leads to… |
| CVE-2023-41436 | Medium (5.4) | 0.51% | — | Sep 16, 2023 | Cross Site Scripting vulnerability in CSZCMS v.1.3.0 allows a local attacker to execute arbitrary code via a crafted script to the Additional Meta Tag parameter in the Pages Content Menu component. |
| CVE-2020-36136 | High (7.5) | 0.64% | — | Aug 11, 2023 | SQL Injection vulnerability in cskaza cszcms version 1.2.9, allows attackers to gain sensitive information via pm_sendmail parameter in csz_model.php. |
| CVE-2023-34545 | Critical (9.8) | 0.82% | — | Aug 9, 2023 | A SQL injection vulnerability in CSZCMS 1.3.0 allows remote attackers to run arbitrary SQL commands via p parameter or the search URL. |
| CVE-2021-46377 | Critical (9.8) | 0.96% | — | Jan 27, 2022 | There is a front-end sql injection vulnerability in cszcms 1.2.9 via cszcms/controllers/Member.php#viewUser |