CVE-2024-25414

Description

References

• capture0x/CSZ_CMS · Exploit
• packetstormsecurity.com/files/175889/CSZ-CMS-1.3.0-Shell-Upload.html · Third Party Advisory

Weitere Schwachstellen in csz cms

• CVE-2021-47738MITTEL 5.4CSZ CMS 1.2.7 contains a persistent cross-site scripting vulnerability that allows unauthorized users to embed malicious JavaScript in priva…
• CVE-2021-47737MITTEL 5.4CSZ CMS 1.2.7 contains an HTML injection vulnerability that allows authenticated users to insert malicious hyperlinks in message titles. Att…
• CVE-2024-58307HOCH 8.8CSZCMS 1.3.0 contains an authenticated SQL injection vulnerability in the members view functionality that allows authenticated attackers to …
• CVE-2025-63608MITTEL 5.4A SQL injection vulnerability exists in CSZ-CMS <=1.3.0 in the Form Builder view functionality. The vulnerability is located in the field pa…
• CVE-2025-29084MITTEL 6.5SQL Injection vulnerability in CSZ-CMS v.1.3.0 allows a remote attacker to execute arbitrary code via the execSqlFile function in the Upgrad…