CVE Database
/

CVE-2025-29084

Back to search

CVE-2025-29084

Published: Sep 23, 2025

Modified: Sep 24, 2025

PUBLISHED

Description

SQL Injection vulnerability in CSZ-CMS v.1.3.0 allows a remote attacker to execute arbitrary code via the execSqlFile function in the Upgrade.php file.

VendorProductVersions

n/a

n/a

affected
n/a

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now