Cszcms · weakness class

File and Path Handling

3 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 3 is a mark on the map. Named now: 1 to 3, most at risk first.

CSZ CMS 1.2.3 allows arbitrary file upload, as demonstrated by a .php file to admin/filemanager in the File Management Module, which leads to remote code execution by visiting a p…CVE-2019-15524Cszcms · 3.1% likely
CWE-434
An arbitrary file upload vulnerability in /admin/upgrade of CSZ CMS v1.3.0 allows attackers to execute arbitrary code via uploading a crafted Zip file.CVE-2024-25414Cszcms · CVSS 9.8 · 1.6% likely
CWE-434
File upload vulnerability in CSKaza CSZ CMS v.1.2.2 fixed in v1.2.4 allows attacker to execute aritrary commands and code via crafted PHP file.CVE-2020-19786Cszcms · CVSS 8.8 · 0.8% likely
CWE-434

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.