VendorsCHSHCMScscms4.0
Vulnerabilities

CHSHCMS CScms 4.0

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2020-21238
An issue in the user login box of CSCMS v4.0 allows attackers to hijack user accounts via brute force attacks.
Published 2021-12-27 · Modified
9.8EPSS 0.009
CVE-2018-16448
Cscms 4 allows CSRF for creating a member via upload/admin.php/user/save, authenticating vip members via upload/admin.php/user/init/tid and upload/admin.php/user/init/rzid, and creating a super administrator and web editor via upload/admin.php/sys/save.
Published 2018-09-04 · Modified
8.8EPSS 0.005