CVE-2024-58307

概要

参考情報

• sourceforge.net/projects/cszcms/files/install/CSZCMS-V1.3.0.zip/download · Product
• cszcms.com · Product
• exploit-db.com/exploits/51916 · Exploit
• vulncheck.com/advisories/cszcms-authenticated-sql-injection-via-members-view-endpoint · Third Party Advisory

csz cms のその他の脆弱性

• CVE-2021-47738中 5.4CSZ CMS 1.2.7 contains a persistent cross-site scripting vulnerability that allows unauthorized users to embed malicious JavaScript in priva…
• CVE-2021-47737中 5.4CSZ CMS 1.2.7 contains an HTML injection vulnerability that allows authenticated users to insert malicious hyperlinks in message titles. Att…
• CVE-2025-63608中 5.4A SQL injection vulnerability exists in CSZ-CMS <=1.3.0 in the Form Builder view functionality. The vulnerability is located in the field pa…
• CVE-2025-29084中 6.5SQL Injection vulnerability in CSZ-CMS v.1.3.0 allows a remote attacker to execute arbitrary code via the execSqlFile function in the Upgrad…
• CVE-2025-29083中 6.5SQL Injection vulnerability in CSZ-CMS v.1.3.0 allows a remote attacker to execute arbitrary code via the execSqlFile function in the Plugin…