Chshcms: Security Vulnerabilities
An issue in the user login box of CSCMS v4.0 allows attackers to hijack user accounts via brute force attacks.
CVSS Score
9.8
EPSS Score
0.003
Published
2021-12-27
A remote code execution (RCE) vulnerability in the \Playsong.php component of cscms v4.1 allows attackers to execute arbitrary commands.
CVSS Score
9.8
EPSS Score
0.065
Published
2021-08-30
An issue was discovered in Cscms 4.1.0. There is an admin.php/pay CSRF vulnerability that can change the payment account to redirect funds.
CVSS Score
6.5
EPSS Score
0.001
Published
2019-03-07
Cscms 4.1.8 allows admin.php/links/save CSRF to add, modify, or delete friend links.
CVSS Score
8.1
EPSS Score
0.001
Published
2019-01-24
CScms 4.1 allows arbitrary directory deletion via a dir=..\\ substring to plugins\sys\admin\Plugins.php.
CVSS Score
7.5
EPSS Score
0.003
Published
2018-09-17
CScms 4.1 allows remote code execution, as demonstrated by 1');eval($_POST[cmd]);# in Web Name to upload\plugins\sys\Install.php.
CVSS Score
9.8
EPSS Score
0.041
Published
2018-09-17
\upload\plugins\sys\Install.php in CScms 4.1 has XSS via the site name.
CVSS Score
6.1
EPSS Score
0.002
Published
2018-09-08
CScms 4.1 allows arbitrary file upload by (for example) adding the php extension to the default filetype list (gif, jpg, png), and then providing a .php pathname within fileurl JSON data.
CVSS Score
9.8
EPSS Score
0.004
Published
2018-09-08
\upload\plugins\sys\admin\Setting.php in CScms 4.1 allows CSRF via admin.php/setting/ftp_save.
CVSS Score
8.8
EPSS Score
0.001
Published
2018-09-08
Cscms 4 allows CSRF for creating a member via upload/admin.php/user/save, authenticating vip members via upload/admin.php/user/init/tid and upload/admin.php/user/init/rzid, and creating a super administrator and web editor via upload/admin.php/sys/save.
CVSS Score
8.8
EPSS Score
0.001
Published
2018-09-04