PT-2025-44400 · Csz Cms · Csz Cms

Huu1J · Published 2025-10-30 · Updated 2025-10-30 · CVE-2025-63608

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions CSZ-CMS versions prior to 1.3.1

Description A SQL injection issue exists in the Form Builder view functionality. The vulnerability is located in the field parameter of the form viewing feature, allowing authenticated administrators to execute arbitrary SQL queries.

Recommendations Update CSZ-CMS to a version newer than 1.3.0.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-63608

Affected Products

Csz Cms

References · 4

• 🔥 https://github.com/Huu1j/CSZ_CMS-exploit/blob/main/csz-cms-vulnerability-analysis.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-63608 · Security Note
• https://osv.dev/vulnerability/CVE-2025-63608 · Vendor Advisory
• https://t.me/CVEtracker/36182 · Telegram Post