Approved changes feed: RSS · Atom
cpe:2.3:a:cszcms:cszcms:1.3.0:*:*:*:*:*:*:*
part: a version: 1.3.0 update: *
| Vendor | Cszcms (8ad51d47-ebd1-57b7-9393-48e43805ff6d) |
|---|---|
| Product | Cszcms (92c0289e-6a7e-5f79-acaf-8cdd4852055e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-27734 |
vulnerable | 2026-06-08 06:31:29.138916 |
Details available
A Cross Site Scripting vulnerability in CSZ CMS v.1.3.0 allows an attacker to execute arbitrary code via a crafted script to the Site Name fields of the Site Settings component.
Published: 2024-03-01T00:00:00.000Z
Updated: 2024-08-29T14:12:47.975Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-25414 |
vulnerable | 2026-06-08 06:31:22.902491 |
Details available
An arbitrary file upload vulnerability in /admin/upgrade of CSZ CMS v1.3.0 allows attackers to execute arbitrary code via uploading a crafted Zip file.
Published: 2024-02-16T00:00:00.000Z
Updated: 2025-03-14T18:54:24.106Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-28997 |
vulnerable | 2026-06-08 05:42:46.300851 |
Details available
CSZCMS v1.3.0 allows attackers to execute a Server-Side Request Forgery (SSRF) which can be leveraged to leak sensitive data via a local file inclusion at /admin/filemanager/connector/.
Published: 2022-05-23T13:35:17.000Z
Updated: 2024-08-03T06:10:57.489Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.