CVE 検索
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ（NVD、OSV、GitHub）を、CVSS、EPSS、実際に悪用されているか（CISA KEV）とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ（NVD、OSV、GitHub）を、CVSS、EPSS、実際に悪用されているか（CISA KEV）とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
| 15/04/2022 |
| CVE-2022-27367 | 高7.2 | Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the component dance_Topic.php_del. | 15/04/2022 |
| CVE-2022-27366 | 高7.2 | Cscms Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the component dance_Dance.php_hy. | 15/04/2022 |
| CVE-2022-27365 | 高7.2 | Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the component dance_Dance.php_del. | 15/04/2022 |
| CVE-2022-27090 | 中5.4 | Cscms Music Portal System v4.2 was discovered to contain a redirection vulnerability via the backurl parameter. | 21/03/2022 |
| CVE-2020-28103 | 緊急9.8 | cscms v4.1 allows for SQL injection via the "page_del" function. | 11/01/2022 |
| CVE-2020-28102 | 緊急9.8 | cscms v4.1 allows for SQL injection via the "js_del" function. | 11/01/2022 |
| CVE-2020-21238 | 緊急9.8 | An issue in the user login box of CSCMS v4.0 allows attackers to hijack user accounts via brute force attacks. | 27/12/2021 |
| CVE-2020-22848 | 緊急9.8 | A remote code execution (RCE) vulnerability in the \Playsong.php component of cscms v4.1 allows attackers to execute arbitrary commands. | 30/08/2021 |
| CVE-2019-9598 | 中6.5 | An issue was discovered in Cscms 4.1.0. There is an admin.php/pay CSRF vulnerability that can change the payment account to redirect funds. | 07/03/2019 |
| CVE-2019-6779 | 高8.1 | Cscms 4.1.8 allows admin.php/links/save CSRF to add, modify, or delete friend links. | 24/01/2019 |
| CVE-2018-17126 | 緊急9.8 | CScms 4.1 allows remote code execution, as demonstrated by 1');eval($_POST[cmd]);# in Web Name to upload\plugins\sys\Install.php. | 17/09/2018 |
| CVE-2018-17125 | 高7.5 | CScms 4.1 allows arbitrary directory deletion via a dir=..\\ substring to plugins\sys\admin\Plugins.php. | 17/09/2018 |
| CVE-2018-16732 | 高8.8 | \upload\plugins\sys\admin\Setting.php in CScms 4.1 allows CSRF via admin.php/setting/ftp_save. | 08/09/2018 |
| CVE-2018-16731 | 緊急9.8 | CScms 4.1 allows arbitrary file upload by (for example) adding the php extension to the default filetype list (gif, jpg, png), and then providing a .php pathname within fileurl JSON data. | 08/09/2018 |
| CVE-2018-16730 | 中6.1 | \upload\plugins\sys\Install.php in CScms 4.1 has XSS via the site name. | 08/09/2018 |
| CVE-2018-16448 | 高8.8 | Cscms 4 allows CSRF for creating a member via upload/admin.php/user/save, authenticating vip members via upload/admin.php/user/init/tid and upload/admin.php/user/init/rzid, and creating a super administrator and web editor via upload/admin.php/sys/save. | 04/09/2018 |