CVE-2021-43701

概要

参考情報

• packetstormsecurity.com/files/166535/CSZ-CMS-1.2.9-SQL-Injection.html · Exploit
• cskaza/cszcms · Exploit
• exploit-db.com/exploits/50846 · Exploit

csz cms のその他の脆弱性

• CVE-2021-47738中 5.4CSZ CMS 1.2.7 contains a persistent cross-site scripting vulnerability that allows unauthorized users to embed malicious JavaScript in priva…
• CVE-2021-47737中 5.4CSZ CMS 1.2.7 contains an HTML injection vulnerability that allows authenticated users to insert malicious hyperlinks in message titles. Att…
• CVE-2024-58307高 8.8CSZCMS 1.3.0 contains an authenticated SQL injection vulnerability in the members view functionality that allows authenticated attackers to …
• CVE-2025-63608中 5.4A SQL injection vulnerability exists in CSZ-CMS <=1.3.0 in the Form Builder view functionality. The vulnerability is located in the field pa…
• CVE-2025-29084中 6.5SQL Injection vulnerability in CSZ-CMS v.1.3.0 allows a remote attacker to execute arbitrary code via the execSqlFile function in the Upgrad…