SQL Injection

Every one of the 11 is a mark on the map. Named now: 1 to 11, most at risk first.

1. core/MY_Security.php in CSZ CMS 1.2.2 before 2019-06-20 has member/login/check SQL injection by sending a crafted HTTP User-Agent header and omitting the csrf_csz parameter.CVE-2019-13086Cszcms · 32% likely

   CWE-89

2. CSZ CMS 1.2.9 has a Time and Boolean-based Blind SQL Injection vulnerability in the endpoint /admin/export/getcsv/article_db, via the fieldS[] and orderby parameters.CVE-2021-43701Cszcms · 3.3% likely

   CWE-89

3. Csz Cms 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Members_viewUsersCVE-2022-27161Cszcms · 1.3% likely

   CWE-89

4. CSZ CMS v1.2.4 was discovered to contain an arbitrary file upload vulnerability in the component /core/MY_Security.php.CVE-2020-21250Cszcms · 1.2% likely

   CWE-89

5. CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Users_editUserCVE-2022-27163Cszcms · 1.2% likely

   CWE-89

6. CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Plugin_manager_setstatusCVE-2022-27165Cszcms · 1.1% likely

   CWE-89

7. CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Users_viewUsersCVE-2022-27164Cszcms · 1.1% likely

   CWE-89

8. CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Members_editUserCVE-2022-27162Cszcms · 1.1% likely

   CWE-89

9. CSZCMS 1.3.0 Authenticated SQL Injection via Members View EndpointCVE-2024-58307cszcms · CVSS 9.3 · 0.5% likely

   CWE-89

10. SQL Injection vulnerability in CSZ-CMS v.1.3.0 allows a remote attacker to execute arbitrary code via the execSqlFile function in the Upgrade.php file.CVE-2025-29084Cszcms · CVSS 6.5 · 0.4% likely

    CWE-89

11. A SQL injection vulnerability exists in CSZ-CMS <=1.3.0 in the Form Builder view functionality. The vulnerability is located in the field parameter of the form viewing feature, al…CVE-2025-63608Cszcms · CVSS 5.4 · 0.2% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.