SQL Injection Vulnerability in CSZ-CMS Web Application by Huu1j
CVE-2025-63608

Currently unrated

Key Information:

Vendor

Huu1j

Status
CSZ-CMS
Vendor
CVE Published:
30 October 2025

What is CVE-2025-63608?

A SQL injection flaw exists in the Form Builder view of CSZ-CMS up to version 1.3.0. This vulnerability occurs in the field parameter, allowing authenticated administrators to run arbitrary SQL queries against the database. Such exploitation can lead to unauthorized access to sensitive data or manipulation of database contents, posing serious security risks for affected web applications.

References

https://github.com/Huu1j/CSZ_CMS-exploit/blob/main/csz-cm...

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-63608 : SQL Injection Vulnerability in CSZ-CMS Web Application by Huu1j