| CVE-2022-29681 | ALTO7.2 | CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/Links/del. | 26/05/2022 |
| CVE-2022-29680 | ALTO7.2 | CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/user/zu_del. | 26/05/2022 |
| CVE-2022-29676 | ALTO7.2 | CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/lists/zhuan. | 26/05/2022 |
| CVE-2022-29670 | ALTO7.2 | CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/type/del. | 26/05/2022 |
| CVE-2022-29669 | ALTO8.8 | CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/news/admin/lists/zhuan. | 26/05/2022 |
| CVE-2022-29667 | ALTO8.8 | CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via /admin.php/pic/admin/pic/hy. This vulnerability is exploited via restoring deleted photos. | 26/05/2022 |
| CVE-2022-29666 | ALTO7.2 | CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/lists/zhuan. | 26/05/2022 |
| CVE-2022-29665 | ALTO7.2 | CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/news/admin/topic/save. | 26/05/2022 |
| CVE-2022-29664 | ALTO8.8 | CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/type/pl_save. | 26/05/2022 |
| CVE-2022-29663 | ALTO7.2 | CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/type/hy. | 26/05/2022 |
| CVE-2022-29662 | ALTO7.2 | CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/news/admin/news/save. | 26/05/2022 |
| CVE-2022-29661 | ALTO7.2 | CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/pic/admin/type/save. | 26/05/2022 |
| CVE-2022-29660 | CRÍTICO9.8 | CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/pic/del. | 26/05/2022 |
| CVE-2022-28552 | ALTO8.8 | Cscms 4.1 is vulnerable to SQL Injection. Log into the background, open the song module, create a new song, delete it to the recycle bin, and SQL injection security problems will occur when emptying the recycle bin. | 04/05/2022 |
| CVE-2022-27369 | ALTO7.2 | Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the component news_News.php_hy. | 15/04/2022 |
| CVE-2022-27368 | ALTO7.2 | Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the component dance_Lists.php_zhuan. | 15/04/2022 |
| CVE-2022-27367 | ALTO7.2 | Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the component dance_Topic.php_del. | 15/04/2022 |
| CVE-2022-27366 | ALTO7.2 | Cscms Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the component dance_Dance.php_hy. | 15/04/2022 |
| CVE-2022-27365 | ALTO7.2 | Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the component dance_Dance.php_del. | 15/04/2022 |
| CVE-2022-27090 | MEDIO5.4 | Cscms Music Portal System v4.2 was discovered to contain a redirection vulnerability via the backurl parameter. | 21/03/2022 |