Lucene search
China National Vulnerability DatabaseCNVD-2021-103084HistoryDec 12, 2021 - 12:00 a.m.
ZZCMS SQL Injection Vulnerability (CNVD-2021-103084)
2021-12-1200:00:00
China National Vulnerability Database
www.cnvd.org.cn
6
0.001 Low
EPSS
Percentile
37.7%
ZZCMS is a content management system (CMS) from the Zzcms team in China. A SQL injection vulnerability exists in ZZCMS, which stems from a lack of validation of externally entered SQL statements when registering regular users in dl/dl_download.php. An attacker could use this vulnerability to execute illegal SQL commands to steal sensitive database data.
| CPE | Name | Operator | Version |
|---|---|---|---|
| zzcms zzcms | eq | 8.3 | |
| zzcms zzcms | eq | 8.2 |
Related
cve
cve
CVE-2021-40282
2021-12-09 17:15:07
cvelist
cvelist
CVE-2021-40282
2021-12-09 16:27:28
nvd
nvd
CVE-2021-40282
2021-12-09 17:15:07
prion
prion
Sql injection
2021-12-09 17:15:00