Approved changes feed: RSS · Atom
cpe:2.3:a:chshcms:cscms:4.1:*:*:*:*:*:*:*
part: a version: 4.1 update: *
| Vendor | Chshcms (9c9d551c-1b9d-5c49-aa9e-1511d295c03d) |
|---|---|
| Product | Cscms (c8cdf2b1-f651-59ed-99fa-979b1fb9f0fa) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/chshcms/cscms |
purl2cpe | 2026-06-01 10:11:09.576713 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-28552 |
vulnerable | 2026-06-08 05:42:44.599517 |
Details available
Cscms 4.1 is vulnerable to SQL Injection. Log into the background, open the song module, create a new song, delete it to the recycle bin, and SQL injection security problems will occur when emptying the recycle bin.
Published: 2022-05-04T14:52:17.000Z
Updated: 2024-08-03T05:56:15.711Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-28103 |
vulnerable | 2026-06-08 05:23:53.782594 |
Details available
cscms v4.1 allows for SQL injection via the "page_del" function.
Published: 2022-01-11T15:49:49.000Z
Updated: 2024-08-04T16:33:57.546Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-28102 |
vulnerable | 2026-06-08 05:23:53.782188 |
Details available
cscms v4.1 allows for SQL injection via the "js_del" function.
Published: 2022-01-11T15:41:34.000Z
Updated: 2024-08-04T16:33:57.578Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-22848 |
vulnerable | 2026-06-08 05:22:31.679673 |
Details available
A remote code execution (RCE) vulnerability in the \Playsong.php component of cscms v4.1 allows attackers to execute arbitrary commands.
Published: 2021-08-30T22:12:51.000Z
Updated: 2024-08-04T14:51:10.747Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9598 |
vulnerable | 2026-06-08 05:14:25.789109 |
Details available
An issue was discovered in Cscms 4.1.0. There is an admin.php/pay CSRF vulnerability that can change the payment account to redirect funds.
Published: 2019-03-07T22:00:00.000Z
Updated: 2024-08-04T21:54:45.021Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-17126 |
vulnerable | 2026-06-08 05:11:05.964746 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-17125 |
vulnerable | 2026-06-08 05:11:05.964448 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16732 |
vulnerable | 2026-06-08 05:11:05.373634 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16731 |
vulnerable | 2026-06-08 05:11:05.373322 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16730 |
vulnerable | 2026-06-08 05:11:05.372799 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.