high8.8
CVE-2022-29667
CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via /admin.php/pic/admin/pic/hy.
Impact
CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via /admin.php/pic/admin/pic/hy. This vulnerability is exploited via restoring deleted photos.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Chshcms | Cscms Music Portal System | Version 4.2 |