high8.8
CVE-2022-29685
CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/User/level_sort.
Impact
CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/User/level_sort.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Chshcms | Cscms Music Portal System | Version 4.2 |