VendorsCHSHCMScscms_music_portal_systemall versions
Vulnerabilities

CHSHCMS CSCMS Music Portal System

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

21CVEs
CVE-2022-29660
CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/pic/del.
Published 2022-05-26 · Modified
9.8EPSS 0.120
CVE-2022-29664
CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/type/pl_save.
Published 2022-05-26 · Modified
8.8EPSS 0.010
CVE-2022-29685
CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/User/level_sort.
Published 2022-05-26 · Modified
8.8EPSS 0.010
CVE-2022-29667
CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via /admin.php/pic/admin/pic/hy. This vulnerability is exploited via restoring deleted photos.
Published 2022-05-26 · Modified
8.8EPSS 0.010
CVE-2022-29669
CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/news/admin/lists/zhuan.
Published 2022-05-26 · Modified
8.8EPSS 0.010
CVE-2022-29676
CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/lists/zhuan.
Published 2022-05-26 · Modified
7.2EPSS 0.009
CVE-2022-29689
CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/singer/admin/singer/del.
Published 2022-05-26 · Modified
7.2EPSS 0.009
CVE-2022-29688
CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/singer/admin/singer/hy.
Published 2022-05-26 · Modified
7.2EPSS 0.009
CVE-2022-29687
CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/user/level_del.
Published 2022-05-26 · Modified
7.2EPSS 0.009
CVE-2022-29686
CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/singer/admin/lists/zhuan.
Published 2022-05-26 · Modified
7.2EPSS 0.009
CVE-2022-29684
CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/Label/js_del.
Published 2022-05-26 · Modified
7.2EPSS 0.009
CVE-2022-29683
CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/Label/page_del.
Published 2022-05-26 · Modified
7.2EPSS 0.009
CVE-2022-29682
CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/vod/admin/topic/del.
Published 2022-05-26 · Modified
7.2EPSS 0.009
CVE-2022-29681
CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/Links/del.
Published 2022-05-26 · Modified
7.2EPSS 0.009
CVE-2022-29680
CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/user/zu_del.
Published 2022-05-26 · Modified
7.2EPSS 0.009
CVE-2022-29670
CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/type/del.
Published 2022-05-26 · Modified
7.2EPSS 0.009
CVE-2022-29666
CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/lists/zhuan.
Published 2022-05-26 · Modified
7.2EPSS 0.009
CVE-2022-29663
CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/type/hy.
Published 2022-05-26 · Modified
7.2EPSS 0.009
CVE-2022-29661
CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/pic/admin/type/save.
Published 2022-05-26 · Modified
7.2EPSS 0.009
CVE-2022-29665
CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/news/admin/topic/save.
Published 2022-05-26 · Modified
7.2EPSS 0.008
CVE-2022-29662
CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/news/admin/news/save.
Published 2022-05-26 · Modified
7.2EPSS 0.008