Chshcms vulnerabilities

Products

• Cscms 21
• Cscms Music Portal System 21
• Mccms 11

Newest

• chshcms mccms MCCMS 2.7.0 is vulnerable to Arbitrary file deletion in the Backups.php component. This allows an... CVE-2025-51818 5.4 MediumAugust 21, 2025
• chshcms mccms MCCMS v2.7.0 has an SSRF vulnerability located in the index() method of the sys\apps\controllers... CVE-2025-50234 6.5 MediumAugust 6, 2025
• chshcms mccms An authenticated arbitrary file download vulnerability in the component /admin/Backups.php of... CVE-2025-51651 5.5 MediumJuly 14, 2025
• chshcms mccms chshcms mccms Backups.php restore_del path traversal CVE-2025-5328 5.3 MediumMay 29, 2025
• chshcms mccms chshcms mccms Gf.php index server-side request forgery CVE-2025-5327 5.3 MediumMay 29, 2025
• chshcms mccms mccms 1 sql injection CVE-2023-5029 5.5 MediumSeptember 17, 2023
• chshcms mccms mccms Comic.php pic_save server-side request forgery CVE-2023-3236 6.3 MediumJune 14, 2023
• chshcms mccms mccms Comic.php pic_api server-side request forgery CVE-2023-3235 6.3 MediumJune 14, 2023
• chshcms mccms mccms v2.6.3 is vulnerable to Cross Site Request Forgery (CSRF). CVE-2023-29815 8.8 HighApril 28, 2023
• chshcms mccms An issue discovered in mccms 2.6.1 allows remote attackers to cause a denial of service via... CVE-2023-26782 6.5 MediumApril 28, 2023
• chshcms mccms SQL injection vulnerability in mccms 2.6 allows remote attackers to run arbitrary SQL commands... CVE-2023-26781 9.8 CriticalApril 28, 2023
• chshcms cscms A Cross-site request forgery (CSRF) vulnerability in Cscms music portal system v4.2 allows remote... CVE-2022-30898 6.5 MediumJune 9, 2022
• chshcms cscms music portal system CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via... CVE-2022-29689 7.2 HighMay 26, 2022
• chshcms cscms music portal system CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via... CVE-2022-29688 7.2 HighMay 26, 2022
• chshcms cscms music portal system CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via... CVE-2022-29687 7.2 HighMay 26, 2022
• chshcms cscms music portal system CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via... CVE-2022-29686 7.2 HighMay 26, 2022
• chshcms cscms music portal system CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via... CVE-2022-29685 8.8 HighMay 26, 2022
• chshcms cscms music portal system CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via... CVE-2022-29684 7.2 HighMay 26, 2022
• chshcms cscms music portal system CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via... CVE-2022-29683 7.2 HighMay 26, 2022
• chshcms cscms music portal system CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via... CVE-2022-29682 7.2 HighMay 26, 2022
• chshcms cscms music portal system CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via... CVE-2022-29681 7.2 HighMay 26, 2022
• chshcms cscms music portal system CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via... CVE-2022-29680 7.2 HighMay 26, 2022
• chshcms cscms music portal system CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id... CVE-2022-29676 7.2 HighMay 26, 2022
• chshcms cscms music portal system CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id... CVE-2022-29670 7.2 HighMay 26, 2022
• chshcms cscms music portal system CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id... CVE-2022-29669 8.8 HighMay 26, 2022
• chshcms cscms music portal system CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via /admin... CVE-2022-29667 8.8 HighMay 26, 2022
• chshcms cscms music portal system CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id... CVE-2022-29666 7.2 HighMay 26, 2022
• chshcms cscms music portal system CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id... CVE-2022-29665 7.2 HighMay 26, 2022
• chshcms cscms music portal system CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id... CVE-2022-29664 8.8 HighMay 26, 2022
• chshcms cscms music portal system CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id... CVE-2022-29663 7.2 HighMay 26, 2022
• chshcms cscms music portal system CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id... CVE-2022-29662 7.2 HighMay 26, 2022
• chshcms cscms music portal system CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via... CVE-2022-29661 7.2 HighMay 26, 2022
• chshcms cscms music portal system CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id... CVE-2022-29660 EPSS 12.0% 9.8 CriticalMay 26, 2022
• chshcms cscms Cscms 4.1 is vulnerable to SQL Injection. Log into the background, open the song module, create a... CVE-2022-28552 8.8 HighMay 4, 2022
• chshcms cscms Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the... CVE-2022-27367 7.2 HighApril 15, 2022
• chshcms cscms Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the... CVE-2022-27369 7.2 HighApril 15, 2022
• chshcms cscms Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the... CVE-2022-27368 7.2 HighApril 15, 2022
• chshcms cscms Cscms Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via... CVE-2022-27366 7.2 HighApril 15, 2022
• chshcms cscms Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the... CVE-2022-27365 7.2 HighApril 15, 2022
• chshcms cscms Cscms Music Portal System v4.2 was discovered to contain a redirection vulnerability via the... CVE-2022-27090 5.4 MediumMarch 21, 2022
• chshcms cscms cscms v4.1 allows for SQL injection via the "page_del" function. CVE-2020-28103 9.8 CriticalJanuary 11, 2022
• chshcms cscms cscms v4.1 allows for SQL injection via the "js_del" function. CVE-2020-28102 9.8 CriticalJanuary 11, 2022
• chshcms cscms An issue in the user login box of CSCMS v4.0 allows attackers to hijack user accounts via brute... CVE-2020-21238 9.8 CriticalDecember 27, 2021
• chshcms cscms A remote code execution (RCE) vulnerability in the \Playsong.php component of cscms v4.1 allows... CVE-2020-22848 9.8 CriticalAugust 30, 2021
• chshcms cscms An issue was discovered in Cscms 4.1.0. There is an admin.php/pay CSRF vulnerability that can... CVE-2019-9598 6.5 MediumMarch 7, 2019
• chshcms cscms Cscms 4.1.8 allows admin.php/links/save CSRF to add, modify, or delete friend links. CVE-2019-6779 8.1 HighJanuary 24, 2019
• chshcms cscms CScms 4.1 allows remote code execution, as demonstrated by 1');eval($_POST[cmd]);# in Web Name to... CVE-2018-17126 9.8 CriticalSeptember 17, 2018
• chshcms cscms CScms 4.1 allows arbitrary directory deletion via a dir=..\\ substring to plugins\sys\admin... CVE-2018-17125 7.5 HighSeptember 17, 2018
• chshcms cscms \upload\plugins\sys\admin\Setting.php in CScms 4.1 allows CSRF via admin.php/setting/ftp_save. CVE-2018-16732 8.8 HighSeptember 8, 2018
• chshcms cscms CScms 4.1 allows arbitrary file upload by (for example) adding the php extension to the default... CVE-2018-16731 9.8 CriticalSeptember 8, 2018
• Show olderLoading…