CVE-2024-25414

Description

References

• capture0x/CSZ_CMS · Exploit
• packetstormsecurity.com/files/175889/CSZ-CMS-1.3.0-Shell-Upload.html · Third Party Advisory

Mais vulnerabilidades de csz cms

• CVE-2021-47738MÉDIO 5.4CSZ CMS 1.2.7 contains a persistent cross-site scripting vulnerability that allows unauthorized users to embed malicious JavaScript in priva…
• CVE-2021-47737MÉDIO 5.4CSZ CMS 1.2.7 contains an HTML injection vulnerability that allows authenticated users to insert malicious hyperlinks in message titles. Att…
• CVE-2024-58307ALTO 8.8CSZCMS 1.3.0 contains an authenticated SQL injection vulnerability in the members view functionality that allows authenticated attackers to …
• CVE-2025-63608MÉDIO 5.4A SQL injection vulnerability exists in CSZ-CMS <=1.3.0 in the Form Builder view functionality. The vulnerability is located in the field pa…
• CVE-2025-29084MÉDIO 6.5SQL Injection vulnerability in CSZ-CMS v.1.3.0 allows a remote attacker to execute arbitrary code via the execSqlFile function in the Upgrad…