CSZ CMS Version 1.3.0 Remote Command Execution

vendor:

CSZ CMS

by:

tmrswrr

8.1

CVSS

CRITICAL

Remote Command Execution

CWE

Product Name: CSZ CMS

Affected Version From: 1.3.2000

Affected Version To: 1.3.2000

Patch Exists: NO

Related CWE: CVE-2023-XXXX

CPE: a:csz_cms:csz_cms:1.3.0

Metasploit:

Other Scripts:

Platforms Tested:

2023

CSZ CMS Version 1.3.0 allows remote attackers to execute arbitrary commands via a crafted request. This vulnerability has a CVE ID of CVE-2023-XXXX.

To mitigate this vulnerability, it is recommended to update to a patched version of CSZ CMS.

Source