Chshcms: >> Cscms Music Portal System Security Vulnerabilities
CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via /admin.php/pic/admin/pic/hy. This vulnerability is exploited via restoring deleted photos.
CVSS Score
8.8
EPSS Score
0.003
Published
2022-05-26
CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/news/admin/lists/zhuan.
CVSS Score
8.8
EPSS Score
0.003
Published
2022-05-26
CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/type/del.
CVSS Score
7.2
EPSS Score
0.003
Published
2022-05-26
CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/lists/zhuan.
CVSS Score
7.2
EPSS Score
0.003
Published
2022-05-26
CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/user/zu_del.
CVSS Score
7.2
EPSS Score
0.003
Published
2022-05-26
CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/Links/del.
CVSS Score
7.2
EPSS Score
0.003
Published
2022-05-26
CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/vod/admin/topic/del.
CVSS Score
7.2
EPSS Score
0.003
Published
2022-05-26
CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/Label/page_del.
CVSS Score
7.2
EPSS Score
0.003
Published
2022-05-26
CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/Label/js_del.
CVSS Score
7.2
EPSS Score
0.003
Published
2022-05-26
CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/User/level_sort.
CVSS Score
8.8
EPSS Score
0.003
Published
2022-05-26