Medium severity6.5NVD Advisory· Published Mar 29, 2022· Updated Jun 17, 2026

CVE-2021-43701

Description

CSZ CMS 1.2.9 has a Time and Boolean-based Blind SQL Injection vulnerability in the endpoint /admin/export/getcsv/article_db, via the fieldS[] and orderby parameters.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

CSZ/CMSdescription
CSZ CMS/cszcmsllm-create3 versions
= 1.2.9+ 2 more
- (no CPE)range: = 1.2.9
- (no CPE)range: = 1.2.9
- cpe:2.3:a:cszcms:csz_cms:1.2.9:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/166535/CSZ-CMS-1.2.9-SQL-Injection.htmlnvdExploitThird Party AdvisoryVDB Entry
github.com/cskaza/cszcms/issues/31nvdExploitIssue TrackingThird Party Advisory
www.exploit-db.com/exploits/50846nvdExploitThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.003
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000