İçeriğe atla
Noroxi

Cszcms kayıtları

cszcms üreticisine ait 30 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
7
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 19
  2. 21
  3. 22
  4. 23
  5. 24
  6. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

30 kayıt
  • CVE-2019-13086
    49Planlayın

    core/MY_Security.php in CSZ CMS 1.2.2 before 2019-06-20 has member/login/check SQL injection by sending a crafted HTTP User-Agent header and

    KritikCVSS 9,8Kavram kanıtıEPSS %32

    cszcms · csz cms30 Haz 2019

  • CVE-2019-15524
    40Planlayın

    CSZ CMS 1.2.3 allows arbitrary file upload, as demonstrated by a .php file to admin/filemanager in the File Management Module, which leads t

    KritikCVSS 9,8İstismar yokEPSS %3

    cszcms · csz cms26 Ağu 2019

  • CVE-2024-25414
    39İzleyin

    An arbitrary file upload vulnerability in /admin/upgrade of CSZ CMS v1.3.0 allows attackers to execute arbitrary code via uploading a crafte

    KritikCVSS 9,8İstismar yokEPSS %2

    cszcms · csz cms15 Şub 2024

  • CVE-2022-27161
    39İzleyin

    Csz Cms 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Members_viewUsers

    KritikCVSS 9,8İstismar yokEPSS %1

    cszcms · csz cms12 Nis 2022

  • CVE-2020-21250
    39İzleyin

    CSZ CMS v1.2.4 was discovered to contain an arbitrary file upload vulnerability in the component /core/MY_Security.php.

    KritikCVSS 9,8İstismar yokEPSS %1

    cszcms · csz cms27 Eki 2021

  • CVE-2022-27163
    39İzleyin

    CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Users_editUser

    KritikCVSS 9,8İstismar yokEPSS %1

    cszcms · csz cms12 Nis 2022

  • CVE-2022-27165
    39İzleyin

    CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Plugin_manager_setstatus

    KritikCVSS 9,8İstismar yokEPSS %1

    cszcms · csz cms12 Nis 2022

  • CVE-2022-27164
    39İzleyin

    CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Users_viewUsers

    KritikCVSS 9,8İstismar yokEPSS %1

    cszcms · csz cms12 Nis 2022

  • CVE-2022-27162
    39İzleyin

    CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Members_editUser

    KritikCVSS 9,8İstismar yokEPSS %1

    cszcms · csz cms12 Nis 2022

  • CVE-2024-58307
    37İzleyin

    CSZCMS 1.3.0 Authenticated SQL Injection via Members View Endpoint

    KritikCVSS 9,3İstismar yokEPSS %1

    cszcms · csz cms11 Ara 2025

  • CVE-2021-37144
    36İzleyin

    CSZ CMS 1.2.9 is vulnerable to Arbitrary File Deletion.

    KritikCVSS 9,1İstismar yokEPSS %1

    cszcms · csz cms30 Tem 2021

  • CVE-2020-19786
    35İzleyin

    File upload vulnerability in CSKaza CSZ CMS v.1.2.2 fixed in v1.2.4 allows attacker to execute aritrary commands and code via crafted PHP fi

    YüksekCVSS 8,8İstismar yokEPSS %1

    cszcms · csz cms23 Mar 2023

  • CVE-2019-7566
    35İzleyin

    CSZ CMS 1.1.8 has CSRF via admin/users/new/add.

    YüksekCVSS 8,8İstismar yokEPSS %1

    cszcms · csz cms7 Şub 2019

  • CVE-2022-28997
    31İzleyin

    CSZCMS v1.3.0 allows attackers to execute a Server-Side Request Forgery (SSRF) which can be leveraged to leak sensitive data via a local fil

    YüksekCVSS 7,5İstismar yokEPSS %2

    cszcms · cszcms23 May 2022

  • CVE-2021-43701
    27İzleyin

    CSZ CMS 1.2.9 has a Time and Boolean-based Blind SQL Injection vulnerability in the endpoint /admin/export/getcsv/article_db, via the fieldS

    OrtaCVSS 6,5Kavram kanıtıEPSS %3

    cszcms · csz cms29 Mar 2022

  • CVE-2025-29083
    26İzleyin

    SQL Injection vulnerability in CSZ-CMS v.1.3.0 allows a remote attacker to execute arbitrary code via the execSqlFile function in the Plugin

    OrtaCVSS 6,5İstismar yokEPSS %0

    cszcms · csz cms23 Eyl 2025

  • CVE-2025-29084
    26İzleyin

    SQL Injection vulnerability in CSZ-CMS v.1.3.0 allows a remote attacker to execute arbitrary code via the execSqlFile function in the Upgrad

    OrtaCVSS 6,5İstismar yokEPSS %0

    cszcms · csz cms23 Eyl 2025

  • CVE-2023-38910
    24İzleyin

    CSZ CMS 1.3.0 is vulnerable to cross-site scripting (XSS), which allows attackers to execute arbitrary web scripts or HTML via a crafted pay

    OrtaCVSS 6,1İstismar yokEPSS %0

    cszcms · csz cms18 Ağu 2023

  • CVE-2024-27734
    24İzleyin

    A Cross Site Scripting vulnerability in CSZ CMS v.1.3.0 allows an attacker to execute arbitrary code via a crafted script to the Site Name f

    OrtaCVSS 6,1İstismar yokEPSS %0

    cszcms · csz cms1 Mar 2024

  • CVE-2023-41601
    24İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in install/index.php of CSZ CMS v1.3.0 allow attackers to execute arbitrary web scripts

    OrtaCVSS 6,1İstismar yokEPSS %0

    cszcms · csz cms6 Eyl 2023

  • CVE-2024-27752
    21İzleyin

    Cross Site Scripting vulnerability in CSZ CMS v.1.3.0 allows a remote attacker to execute arbitrary code via the Default Keyword field in th

    OrtaCVSS 5,4İstismar yokEPSS %1

    cszcms · csz cms19 Nis 2024

  • CVE-2021-3224
    21İzleyin

    A stored cross-site scripting (XSS) vulnerability in cszcms 1.2.9 exists in /admin/pages/new via the content parameter.

    OrtaCVSS 5,4İstismar yokEPSS %1

    cszcms · csz cms10 Mar 2021

  • CVE-2021-26776
    21İzleyin

    CSZ CMS 1.2.9 is affected by a cross-site scripting (XSS) vulnerability in multiple pages through the field name.

    OrtaCVSS 5,4İstismar yokEPSS %1

    cszcms · csz cms11 Mar 2021

  • CVE-2023-39599
    21İzleyin

    Cross-Site Scripting (XSS) vulnerability in CSZ CMS v.1.3.0 allows attackers to execute arbitrary code via a crafted payload to the Social S

    OrtaCVSS 5,4İstismar yokEPSS %1

    cszcms · csz cms22 Ağu 2023

  • CVE-2023-38911
    21İzleyin

    A Cross-Site Scripting (XSS) vulnerability in CSZ CMS 1.3.0 allows attackers to execute arbitrary code via a crafted payload to the Gallery

    OrtaCVSS 5,4İstismar yokEPSS %0

    cszcms · csz cms18 Ağu 2023