A SQL injection vulnerability in CSZCMS 1.3.0 allows remote attackers to run arbitrary SQL commands via p parameter or the search URL.

Published Aug 9, 2023 · Updated Oct 10, 2024 · Assigned by mitre