CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 26/05/2022 |
| CVE-2022-29669 | 高危8.8 | CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/news/admin/lists/zhuan. | 26/05/2022 |
| CVE-2022-29667 | 高危8.8 | CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via /admin.php/pic/admin/pic/hy. This vulnerability is exploited via restoring deleted photos. | 26/05/2022 |
| CVE-2022-29666 | 高危7.2 | CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/lists/zhuan. | 26/05/2022 |
| CVE-2022-29665 | 高危7.2 | CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/news/admin/topic/save. | 26/05/2022 |
| CVE-2022-29664 | 高危8.8 | CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/type/pl_save. | 26/05/2022 |
| CVE-2022-29663 | 高危7.2 | CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/type/hy. | 26/05/2022 |
| CVE-2022-29662 | 高危7.2 | CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/news/admin/news/save. | 26/05/2022 |
| CVE-2022-29661 | 高危7.2 | CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/pic/admin/type/save. | 26/05/2022 |
| CVE-2022-29660 | 严重9.8 | CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/pic/del. | 26/05/2022 |
| CVE-2022-28552 | 高危8.8 | Cscms 4.1 is vulnerable to SQL Injection. Log into the background, open the song module, create a new song, delete it to the recycle bin, and SQL injection security problems will occur when emptying the recycle bin. | 04/05/2022 |
| CVE-2022-27369 | 高危7.2 | Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the component news_News.php_hy. | 15/04/2022 |
| CVE-2022-27368 | 高危7.2 | Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the component dance_Lists.php_zhuan. | 15/04/2022 |
| CVE-2022-27367 | 高危7.2 | Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the component dance_Topic.php_del. | 15/04/2022 |
| CVE-2022-27366 | 高危7.2 | Cscms Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the component dance_Dance.php_hy. | 15/04/2022 |
| CVE-2022-27365 | 高危7.2 | Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the component dance_Dance.php_del. | 15/04/2022 |
| CVE-2022-27090 | 中危5.4 | Cscms Music Portal System v4.2 was discovered to contain a redirection vulnerability via the backurl parameter. | 21/03/2022 |