CSZ CMS 1.3.0
Approved changes feed: RSS · Atom
cpe:2.3:a:cszcms:csz_cms:1.3.0:*:*:*:*:*:*:*
part: a version: 1.3.0 update: *
| Vendor | Cszcms (8ad51d47-ebd1-57b7-9393-48e43805ff6d) |
|---|---|
| Product | Csz Cms (84ba435b-7100-507c-97dd-1a0439326813) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/cskaza/cszcms |
purl2cpe | 2026-06-01 10:16:10.889446 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-29084 |
vulnerable | 2026-06-08 07:14:56.342746 |
Details available
SQL Injection vulnerability in CSZ-CMS v.1.3.0 allows a remote attacker to execute arbitrary code via the execSqlFile function in the Upgrade.php file.
Published: 2025-09-23T00:00:00.000Z
Updated: 2025-09-24T18:35:12.639Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-29083 |
vulnerable | 2026-06-08 07:14:56.342413 |
Details available
SQL Injection vulnerability in CSZ-CMS v.1.3.0 allows a remote attacker to execute arbitrary code via the execSqlFile function in the Plugin_Manager.php file.
Published: 2025-09-23T00:00:00.000Z
Updated: 2025-09-24T18:34:25.232Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-58307 |
vulnerable | 2026-06-08 06:56:14.407139 |
CSZCMS 1.3.0 Authenticated SQL Injection via Members View Endpoint
CSZCMS 1.3.0 contains an authenticated SQL injection vulnerability in the members view functionality that allows authenticated attackers to manipulate database queries. Attackers can inject malicious SQL code through the view parameter to potentially execute time-based blind SQL injection attacks and extract database information.
Published: 2025-12-11T21:41:54.372Z
Updated: 2026-07-14T22:54:51.443Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-27752 |
vulnerable | 2026-06-08 06:31:29.148705 |
Details available
Cross Site Scripting vulnerability in CSZ CMS v.1.3.0 allows a remote attacker to execute arbitrary code via the Default Keyword field in the settings function.
Published: 2024-04-19T00:00:00.000Z
Updated: 2024-08-02T00:34:52.523Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-27734 |
vulnerable | 2026-06-08 06:31:29.138985 |
Details available
A Cross Site Scripting vulnerability in CSZ CMS v.1.3.0 allows an attacker to execute arbitrary code via a crafted script to the Site Name fields of the Site Settings component.
Published: 2024-03-01T00:00:00.000Z
Updated: 2024-08-29T14:12:47.975Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-25414 |
vulnerable | 2026-06-08 06:31:22.906298 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-41601 |
vulnerable | 2026-06-08 06:11:06.227601 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-39599 |
vulnerable | 2026-06-08 06:09:37.815106 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38911 |
vulnerable | 2026-06-08 06:08:19.121202 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38910 |
vulnerable | 2026-06-08 06:08:19.120744 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.