critical9.8
CVE-2023-34545
A SQL injection vulnerability in CSZCMS 1.3.0 allows remote attackers to run arbitrary SQL commands via p parameter or the search URL.
Impact
A SQL injection vulnerability in CSZCMS 1.3.0 allows remote attackers to run arbitrary SQL commands via p parameter or the search URL.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cskaza | Cszcms | Version 1.3.0 |