Approved changes feed: RSS · Atom

cpe:2.3:a:cszcms:csz_cms:1.2.3:*:*:*:*:*:*:*

part: a version: 1.2.3 update: *

VendorCszcms (8ad51d47-ebd1-57b7-9393-48e43805ff6d)
ProductCsz Cms (84ba435b-7100-507c-97dd-1a0439326813)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/cskaza/cszcms purl2cpe 2026-06-01 10:16:10.882456

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-15524 vulnerable 2026-06-08 05:12:57.530370 Details available
CSZ CMS 1.2.3 allows arbitrary file upload, as demonstrated by a .php file to admin/filemanager in the File Management Module, which leads to remote code execution by visiting a photo/upload/2019/ URI.
Published: 2019-08-26T12:52:49.000Z
Updated: 2024-08-05T00:49:13.590Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.