Vulnerabilities > Cszcms > CSZ CMS > 1.1.8

DATE CVE VULNERABILITY TITLE RISK
2019-06-30 CVE-2019-13086 SQL Injection vulnerability in Cszcms CSZ CMS
core/MY_Security.php in CSZ CMS 1.2.2 before 2019-06-20 has member/login/check SQL injection by sending a crafted HTTP User-Agent header and omitting the csrf_csz parameter.
network
low complexity
cszcms CWE-89
7.5
7.5
2019-02-07 CVE-2019-7566 Cross-Site Request Forgery (CSRF) vulnerability in Cszcms CSZ CMS 1.1.8
CSZ CMS 1.1.8 has CSRF via admin/users/new/add.
network
cszcms CWE-352
6.8
6.8