CVE-2021-43701

PoC ×3—

CVSS 3.1

6.5 medium

EPSS

3%p88

Published

Mar 29, 2022 (Mar 29, 2022)

Modified

Jun 17, 2026

Description

CSZ CMS 1.2.9 has a Time and Boolean-based Blind SQL Injection vulnerability in the endpoint /admin/export/getcsv/article_db, via the fieldS[] and orderby parameters.

Vendors: cszcms
Products: csz cms
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (3.3%)

In the news0 stories

No ingested article mentions this CVE yet.