Chshcms vulnerabilities
We track 7 vulnerabilities in Chshcms products across 3 products. 7 are rated high or critical, and none are known to be exploited. The most recent was published on May 29, 2025.
Latest Chshcms vulnerabilities
- 8.8 High severity
mccms: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability was found in chshcms mccms 2.7. It has been declared as critical. This vulnerability affects the function restore_del of the file /sys/apps/controllers/admin/Backups.php. The manipulation of the argument dirs leads to path traversal. The attack
- 8.8 High severity
mccms: Server-Side Request Forgery
A vulnerability was found in chshcms mccms 2.7. It has been classified as critical. This affects the function index of the file sys/apps/controllers/api/Gf.php. The manipulation of the argument pic leads to server-side request forgery. It is possible to initia
- 7.2 High severity
Cscms Music Portal System: Improper Neutralization of Special Elements used in an SQL Command
CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/singer/admin/singer/del.
- 7.2 High severity
Cscms Music Portal System: Improper Neutralization of Special Elements used in an SQL Command
CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/singer/admin/singer/hy.
- 7.2 High severity
Cscms Music Portal System: Improper Neutralization of Special Elements used in an SQL Command
CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/singer/admin/lists/zhuan.
- 8.8 High severity
Cscms Music Portal System: Improper Neutralization of Special Elements used in an SQL Command
CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via /admin.php/pic/admin/pic/hy. This vulnerability is exploited via restoring deleted photos.
- 8.8 High severity
Cscms: Improper Neutralization of Special Elements used in an SQL Command
Cscms 4.1 is vulnerable to SQL Injection. Log into the background, open the song module, create a new song, delete it to the recycle bin, and SQL injection security problems will occur when emptying the recycle bin.