Chshcms Cscms vulnerabilities

• chshcms cscms A Cross-site request forgery (CSRF) vulnerability in Cscms music portal system v4.2 allows remote... CVE-2022-30898 6.5 MediumJune 9, 2022
• chshcms cscms music portal system CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via... CVE-2022-29689 7.2 HighMay 26, 2022
• chshcms cscms music portal system CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via... CVE-2022-29688 7.2 HighMay 26, 2022
• chshcms cscms music portal system CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via... CVE-2022-29687 7.2 HighMay 26, 2022
• chshcms cscms music portal system CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via... CVE-2022-29686 7.2 HighMay 26, 2022
• chshcms cscms music portal system CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via... CVE-2022-29685 8.8 HighMay 26, 2022
• chshcms cscms music portal system CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via... CVE-2022-29684 7.2 HighMay 26, 2022
• chshcms cscms music portal system CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via... CVE-2022-29683 7.2 HighMay 26, 2022
• chshcms cscms music portal system CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via... CVE-2022-29682 7.2 HighMay 26, 2022
• chshcms cscms music portal system CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via... CVE-2022-29681 7.2 HighMay 26, 2022
• chshcms cscms music portal system CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via... CVE-2022-29680 7.2 HighMay 26, 2022
• chshcms cscms music portal system CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id... CVE-2022-29676 7.2 HighMay 26, 2022
• chshcms cscms music portal system CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id... CVE-2022-29670 7.2 HighMay 26, 2022
• chshcms cscms music portal system CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id... CVE-2022-29669 8.8 HighMay 26, 2022
• chshcms cscms music portal system CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via /admin... CVE-2022-29667 8.8 HighMay 26, 2022
• chshcms cscms music portal system CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id... CVE-2022-29666 7.2 HighMay 26, 2022
• chshcms cscms music portal system CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id... CVE-2022-29665 7.2 HighMay 26, 2022
• chshcms cscms music portal system CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id... CVE-2022-29664 8.8 HighMay 26, 2022
• chshcms cscms music portal system CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id... CVE-2022-29663 7.2 HighMay 26, 2022
• chshcms cscms music portal system CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id... CVE-2022-29662 7.2 HighMay 26, 2022
• chshcms cscms music portal system CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via... CVE-2022-29661 7.2 HighMay 26, 2022
• chshcms cscms music portal system CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id... CVE-2022-29660 EPSS 12.0% 9.8 CriticalMay 26, 2022
• chshcms cscms Cscms 4.1 is vulnerable to SQL Injection. Log into the background, open the song module, create a... CVE-2022-28552 8.8 HighMay 4, 2022
• chshcms cscms Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the... CVE-2022-27367 7.2 HighApril 15, 2022
• chshcms cscms Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the... CVE-2022-27369 7.2 HighApril 15, 2022
• chshcms cscms Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the... CVE-2022-27368 7.2 HighApril 15, 2022
• chshcms cscms Cscms Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via... CVE-2022-27366 7.2 HighApril 15, 2022
• chshcms cscms Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the... CVE-2022-27365 7.2 HighApril 15, 2022
• chshcms cscms Cscms Music Portal System v4.2 was discovered to contain a redirection vulnerability via the... CVE-2022-27090 5.4 MediumMarch 21, 2022
• chshcms cscms cscms v4.1 allows for SQL injection via the "page_del" function. CVE-2020-28103 9.8 CriticalJanuary 11, 2022
• chshcms cscms cscms v4.1 allows for SQL injection via the "js_del" function. CVE-2020-28102 9.8 CriticalJanuary 11, 2022
• chshcms cscms An issue in the user login box of CSCMS v4.0 allows attackers to hijack user accounts via brute... CVE-2020-21238 9.8 CriticalDecember 27, 2021
• chshcms cscms A remote code execution (RCE) vulnerability in the \Playsong.php component of cscms v4.1 allows... CVE-2020-22848 9.8 CriticalAugust 30, 2021
• chshcms cscms An issue was discovered in Cscms 4.1.0. There is an admin.php/pay CSRF vulnerability that can... CVE-2019-9598 6.5 MediumMarch 7, 2019
• chshcms cscms Cscms 4.1.8 allows admin.php/links/save CSRF to add, modify, or delete friend links. CVE-2019-6779 8.1 HighJanuary 24, 2019
• chshcms cscms CScms 4.1 allows remote code execution, as demonstrated by 1');eval($_POST[cmd]);# in Web Name to... CVE-2018-17126 9.8 CriticalSeptember 17, 2018
• chshcms cscms CScms 4.1 allows arbitrary directory deletion via a dir=..\\ substring to plugins\sys\admin... CVE-2018-17125 7.5 HighSeptember 17, 2018
• chshcms cscms \upload\plugins\sys\admin\Setting.php in CScms 4.1 allows CSRF via admin.php/setting/ftp_save. CVE-2018-16732 8.8 HighSeptember 8, 2018
• chshcms cscms CScms 4.1 allows arbitrary file upload by (for example) adding the php extension to the default... CVE-2018-16731 9.8 CriticalSeptember 8, 2018
• chshcms cscms \upload\plugins\sys\Install.php in CScms 4.1 has XSS via the site name. CVE-2018-16730 6.1 MediumSeptember 8, 2018
• chshcms cscms Cscms 4 allows CSRF for creating a member via upload/admin.php/user/save, authenticating vip... CVE-2018-16448 8.8 HighSeptember 4, 2018
• chshcms cscms An issue was discovered in Cscms V4.1.8. There is a CSRF vulnerability that can modify a website... CVE-2018-16337 6.5 MediumSeptember 2, 2018