Approved changes feed: RSS · Atom

cpe:2.3:a:chshcms:cscms:4.0:*:*:*:*:*:*:*

part: a version: 4.0 update: *

VendorChshcms (9c9d551c-1b9d-5c49-aa9e-1511d295c03d)
ProductCscms (c8cdf2b1-f651-59ed-99fa-979b1fb9f0fa)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/chshcms/cscms purl2cpe 2026-06-01 10:11:09.576711

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-21238 vulnerable 2026-06-08 05:22:30.753933 Details available
An issue in the user login box of CSCMS v4.0 allows attackers to hijack user accounts via brute force attacks.
Published: 2021-12-27T22:23:00.000Z
Updated: 2024-08-04T14:22:25.458Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-16448 vulnerable 2026-06-08 05:11:04.860093 Details available
Cscms 4 allows CSRF for creating a member via upload/admin.php/user/save, authenticating vip members via upload/admin.php/user/init/tid and upload/admin.php/user/init/rzid, and creating a super administrator and web editor via upload/admin.php/sys/save.
Published: 2018-09-04T04:00:00.000Z
Updated: 2024-08-05T10:24:32.439Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.