CVE-2024-25414

概要

参考情報

• capture0x/CSZ_CMS · Exploit
• packetstormsecurity.com/files/175889/CSZ-CMS-1.3.0-Shell-Upload.html · Third Party Advisory

csz cms のその他の脆弱性

• CVE-2021-47738中 5.4CSZ CMS 1.2.7 contains a persistent cross-site scripting vulnerability that allows unauthorized users to embed malicious JavaScript in priva…
• CVE-2021-47737中 5.4CSZ CMS 1.2.7 contains an HTML injection vulnerability that allows authenticated users to insert malicious hyperlinks in message titles. Att…
• CVE-2024-58307高 8.8CSZCMS 1.3.0 contains an authenticated SQL injection vulnerability in the members view functionality that allows authenticated attackers to …
• CVE-2025-63608中 5.4A SQL injection vulnerability exists in CSZ-CMS <=1.3.0 in the Form Builder view functionality. The vulnerability is located in the field pa…
• CVE-2025-29084中 6.5SQL Injection vulnerability in CSZ-CMS v.1.3.0 allows a remote attacker to execute arbitrary code via the execSqlFile function in the Upgrad…