CVE-2023-34545

CriticalCVSS 9.8

Published: 09/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.62%

45th percentile - higher than 45% of all known CVEs

Summary

CSZCMS version 1.3.0 has a SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands via the p parameter or the search URL.

Risk Assessment

This vulnerability could lead to unauthorized access to the database, posing a serious threat to the integrity and confidentiality of the organization's data.

Recommendation

It is recommended to update CSZCMS to the latest version and implement input filtering and validation to minimize the risk of SQL injection.

Original NVD description (English source)

A SQL injection vulnerability in CSZCMS 1.3.0 allows remote attackers to run arbitrary SQL commands via p parameter or the search URL.