CVE-2019-13086 | BDVDB-2026-118487 Detail

Description#

core/MY_Security.php in CSZ CMS 1.2.2 before 2019-06-20 has member/login/check SQL injection by sending a crafted HTTP User-Agent header and omitting the csrf_csz parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/cskaza/cszcms/issues/19

Exploit#

No public exploit known

History#

Version 12019-06-30Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.