← All advisories

Critical severity9.8NVD Advisory· Published Aug 9, 2023· Updated Jun 17, 2026

CVE-2023-34545

CVE-2023-34545

Description

A SQL injection vulnerability in CSZCMS 1.3.0 allows remote attackers to run arbitrary SQL commands via p parameter or the search URL.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

CSZ CMS/cszcms2 versions
cpe:2.3:a:cskaza:cszcms:1.3.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:cskaza:cszcms:1.3.0:*:*:*:*:*:*:*
- (no CPE)
Cszcms.com/cszcmsllm-fuzzy
Range: <=1.3.0

Patches

Vulnerability mechanics

References

2

gist.github.com/komomon/24d3ea391af6f067c044fa47cb6c20d8nvdThird Party Advisory
www.cszcms.comnvdProduct

News mentions

0

No linked articles in our index yet.