CVE-2022-28997

ALTO 7.5CVE-2022-28997 · Published 23/05/2022 · updated 17/06/2026

In breve

CVE-2022-28997 è una vulnerabilità ALTO (CVSS 7.5) che riguarda cszcms (cszcms).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.1%, superiore al 81.5% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
cszcms cszcms	`= 1.3.0`	No fix yet

Description

CSZCMS v1.3.0 allows attackers to execute a Server-Side Request Forgery (SSRF) which can be leveraged to leak sensitive data via a local file inclusion at /admin/filemanager/connector/.

References

i.imgur.com/BwWTfYU.png · Exploit
i.imgur.com/S1F7MaJ.png · Exploit
i.imgur.com/pzWjkXI.png · Exploit
i.imgur.com/xxjxnGk.png · Exploit
packetstormsecurity.com/files/166613/CSZCMS-1.3.0-SSRF-LFI-Remote-Code-Execution.html · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free