Skip to content

Chshcms · weakness class

SQL Injection

31 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

likely to be exploited
1

Every one of the 31 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/pic/del.CVE-2022-29660Chshcms · 12% likely

    CWE-89

  2. cscms v4.1 allows for SQL injection via the "js_del" function.CVE-2020-28102Chshcms · 1.3% likely

    CWE-89

  3. cscms v4.1 allows for SQL injection via the "page_del" function.CVE-2020-28103Chshcms · 1.1% likely

    CWE-89

  4. SQL injection vulnerability in mccms 2.6 allows remote attackers to run arbitrary SQL commands via Author Center ->Reader Comments ->Search.CVE-2023-26781Chshcms · CVSS 9.8 · 1.0% likely

    CWE-89

  5. CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/User/level_sort.CVE-2022-29685Chshcms · 1.0% likely

    CWE-89

  6. CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/news/admin/lists/zhuan.CVE-2022-29669Chshcms · 1.0% likely

    CWE-89

  7. CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via /admin.php/pic/admin/pic/hy. This vulnerability is exploited via restoring deleted photo…CVE-2022-29667Chshcms · 1.0% likely

    CWE-89

  8. CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/type/pl_save.CVE-2022-29664Chshcms · 1.0% likely

    CWE-89

  9. CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/singer/admin/singer/del.CVE-2022-29689Chshcms · 1.0% likely

    CWE-89

  10. CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/singer/admin/singer/hy.CVE-2022-29688Chshcms · 1.0% likely

    CWE-89

  11. CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/user/level_del.CVE-2022-29687Chshcms · 1.0% likely

    CWE-89

  12. CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/singer/admin/lists/zhuan.CVE-2022-29686Chshcms · 1.0% likely

    CWE-89

  13. CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/Label/js_del.CVE-2022-29684Chshcms · 1.0% likely

    CWE-89

  14. CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/Label/page_del.CVE-2022-29683Chshcms · 1.0% likely

    CWE-89

  15. CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/vod/admin/topic/del.CVE-2022-29682Chshcms · 1.0% likely

    CWE-89

  16. CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/Links/del.CVE-2022-29681Chshcms · 1.0% likely

    CWE-89

  17. CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/user/zu_del.CVE-2022-29680Chshcms · 1.0% likely

    CWE-89

  18. CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/lists/zhuan.CVE-2022-29676Chshcms · 1.0% likely

    CWE-89

  19. CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/type/del.CVE-2022-29670Chshcms · 1.0% likely

    CWE-89

  20. CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/lists/zhuan.CVE-2022-29666Chshcms · 1.0% likely

    CWE-89

  21. CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/type/hy.CVE-2022-29663Chshcms · 1.0% likely

    CWE-89

  22. CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/pic/admin/type/save.CVE-2022-29661Chshcms · 1.0% likely

    CWE-89

  23. Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the component dance_Dance.php_del.CVE-2022-27365Chshcms · 1.0% likely

    CWE-89

  24. Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the component news_News.php_hy.CVE-2022-27369Chshcms · 0.9% likely

    CWE-89

  25. Cscms 4.1 is vulnerable to SQL Injection. Log into the background, open the song module, create a new song, delete it to the recycle bin, and SQL injection security problems will…CVE-2022-28552Chshcms · 0.9% likely

    CWE-89

  26. CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/news/admin/topic/save.CVE-2022-29665Chshcms · 0.8% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.