Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-51651 1 Chshcms 1 Mccms 2025-07-17 5.5 Medium
An authenticated arbitrary file download vulnerability in the component /admin/Backups.php of Mccms v2.7.0 allows attackers to download arbitrary files via a crafted GET request.
CVE-2022-30898 1 Chshcms 1 Cscms 2024-11-21 6.5 Medium
A Cross-site request forgery (CSRF) vulnerability in Cscms music portal system v4.2 allows remote attackers to change the administrator's username and password.