Show filters
48 Total Results
Displaying 21-30 of 48
Sort by:
Attacker Value
Unknown

CVE-2022-29667

Disclosure Date: May 26, 2022 (last updated February 23, 2025)
CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via /admin.php/pic/admin/pic/hy. This vulnerability is exploited via restoring deleted photos.
Attacker Value
Unknown

CVE-2022-29666

Disclosure Date: May 26, 2022 (last updated February 23, 2025)
CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/lists/zhuan.
Attacker Value
Unknown

CVE-2022-29665

Disclosure Date: May 26, 2022 (last updated February 23, 2025)
CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/news/admin/topic/save.
Attacker Value
Unknown

CVE-2022-29664

Disclosure Date: May 26, 2022 (last updated February 23, 2025)
CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/type/pl_save.
Attacker Value
Unknown

CVE-2022-29663

Disclosure Date: May 26, 2022 (last updated February 23, 2025)
CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/type/hy.
Attacker Value
Unknown

CVE-2022-29662

Disclosure Date: May 26, 2022 (last updated February 23, 2025)
CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/news/admin/news/save.
Attacker Value
Unknown

CVE-2022-29661

Disclosure Date: May 26, 2022 (last updated February 23, 2025)
CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/pic/admin/type/save.
Attacker Value
Unknown

CVE-2022-29660

Disclosure Date: May 26, 2022 (last updated February 23, 2025)
CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/pic/del.
Attacker Value
Unknown

CVE-2022-28552

Disclosure Date: May 04, 2022 (last updated February 23, 2025)
Cscms 4.1 is vulnerable to SQL Injection. Log into the background, open the song module, create a new song, delete it to the recycle bin, and SQL injection security problems will occur when emptying the recycle bin.
Attacker Value
Unknown

CVE-2022-27369

Disclosure Date: April 15, 2022 (last updated February 23, 2025)
Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the component news_News.php_hy.