Show filters
28 Total Results
Displaying 1-10 of 28
Sort by:
Attacker Value
Unknown

CVE-2022-30898

Disclosure Date: June 09, 2022 (last updated February 23, 2025)
A Cross-site request forgery (CSRF) vulnerability in Cscms music portal system v4.2 allows remote attackers to change the administrator's username and password.
Attacker Value
Unknown

CVE-2022-29689

Disclosure Date: May 26, 2022 (last updated February 23, 2025)
CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/singer/admin/singer/del.
Attacker Value
Unknown

CVE-2022-29688

Disclosure Date: May 26, 2022 (last updated February 23, 2025)
CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/singer/admin/singer/hy.
Attacker Value
Unknown

CVE-2022-29687

Disclosure Date: May 26, 2022 (last updated February 23, 2025)
CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/user/level_del.
Attacker Value
Unknown

CVE-2022-29686

Disclosure Date: May 26, 2022 (last updated February 23, 2025)
CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/singer/admin/lists/zhuan.
Attacker Value
Unknown

CVE-2022-29685

Disclosure Date: May 26, 2022 (last updated February 23, 2025)
CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/User/level_sort.
Attacker Value
Unknown

CVE-2022-29684

Disclosure Date: May 26, 2022 (last updated February 23, 2025)
CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/Label/js_del.
Attacker Value
Unknown

CVE-2022-29683

Disclosure Date: May 26, 2022 (last updated February 23, 2025)
CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/Label/page_del.
Attacker Value
Unknown

CVE-2022-29682

Disclosure Date: May 26, 2022 (last updated February 23, 2025)
CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/vod/admin/topic/del.
Attacker Value
Unknown

CVE-2022-29681

Disclosure Date: May 26, 2022 (last updated February 23, 2025)
CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/Links/del.