chshcms Cscms 4.2
Approved changes feed: RSS · Atom
cpe:2.3:a:chshcms:cscms:4.2:*:*:*:*:*:*:*
part: a version: 4.2 update: *
| Vendor | Chshcms (9c9d551c-1b9d-5c49-aa9e-1511d295c03d) |
|---|---|
| Product | Cscms (c8cdf2b1-f651-59ed-99fa-979b1fb9f0fa) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/chshcms/cscms |
purl2cpe | 2026-06-01 10:11:09.576716 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-30898 |
vulnerable | 2026-06-08 05:43:39.817047 |
Details available
A Cross-site request forgery (CSRF) vulnerability in Cscms music portal system v4.2 allows remote attackers to change the administrator's username and password.
Published: 2022-06-09T18:52:44.000Z
Updated: 2024-08-03T07:03:39.780Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-27369 |
vulnerable | 2026-06-08 05:41:55.180622 |
Details available
Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the component news_News.php_hy.
Published: 2022-04-15T17:31:10.000Z
Updated: 2024-08-03T05:25:32.601Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-27368 |
vulnerable | 2026-06-08 05:41:55.180363 |
Details available
Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the component dance_Lists.php_zhuan.
Published: 2022-04-15T17:31:09.000Z
Updated: 2024-08-03T05:25:32.643Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-27367 |
vulnerable | 2026-06-08 05:41:55.180091 |
Details available
Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the component dance_Topic.php_del.
Published: 2022-04-15T17:31:11.000Z
Updated: 2024-08-03T05:25:32.623Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-27366 |
vulnerable | 2026-06-08 05:41:55.179812 |
Details available
Cscms Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the component dance_Dance.php_hy.
Published: 2022-04-15T17:31:06.000Z
Updated: 2024-08-03T05:25:32.658Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-27365 |
vulnerable | 2026-06-08 05:41:55.179505 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-27090 |
vulnerable | 2026-06-08 05:41:54.811511 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.