CVE-2023-41436

概要

参考情報

• sromanhu/CSZ-CMS-Stored-XSS---Pages-Content · Exploit

cszcms のその他の脆弱性

• CVE-2023-6303中 4.8A vulnerability was found in CSZCMS 1.3.0. It has been classified as problematic. This affects an unknown part of the file /admin/settings/ …
• CVE-2023-6302高 7.2A vulnerability was found in CSZCMS 1.3.0 and classified as critical. Affected by this issue is some unknown functionality of the file \view…
• CVE-2020-36136高 7.5SQL Injection vulnerability in cskaza cszcms version 1.2.9, allows attackers to gain sensitive information via pm_sendmail parameter in csz_…
• CVE-2023-34545緊急 9.8A SQL injection vulnerability in CSZCMS 1.3.0 allows remote attackers to run arbitrary SQL commands via p parameter or the search URL.
• CVE-2021-46377緊急 9.8There is a front-end sql injection vulnerability in cszcms 1.2.9 via cszcms/controllers/Member.php#viewUser