Unrated severityNVD Advisory· Published Sep 23, 2025· Updated Sep 24, 2025
CVE-2025-29084
CVE-2025-29084
Description
SQL Injection vulnerability in CSZ-CMS v.1.3.0 allows a remote attacker to execute arbitrary code via the execSqlFile function in the Upgrade.php file.
Affected products
2- CSZ-CMS/CSZ-CMSdescription
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.