VYPR
← All advisories
High severity7.5NVD Advisory· Published Aug 11, 2023· Updated Jun 17, 2026

CVE-2020-36136

CVE-2020-36136

Description

SQL Injection vulnerability in cskaza cszcms version 1.2.9, allows attackers to gain sensitive information via pm_sendmail parameter in csz_model.php.

Affected products

3
  • cskaza/cszcmsdescription
  • CSZ CMS/cszcmsllm-create2 versions
    =1.2.9+ 1 more
    • (no CPE)range: =1.2.9
    • cpe:2.3:a:cskaza:cszcms:1.2.9:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.