Vulnerabilities > Cszcms
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2019-06-30 | CVE-2019-13086 | SQL Injection vulnerability in Cszcms CSZ CMS core/MY_Security.php in CSZ CMS 1.2.2 before 2019-06-20 has member/login/check SQL injection by sending a crafted HTTP User-Agent header and omitting the csrf_csz parameter. | 9.8 |
| 2019-02-07 | CVE-2019-7566 | Cross-Site Request Forgery (CSRF) vulnerability in Cszcms CSZ CMS 1.1.8 CSZ CMS 1.1.8 has CSRF via admin/users/new/add. | 8.8 |