An arbitrary file upload vulnerability at /zbzedit/php/zbz.php in zbzcms v1.0 allows attackers to execute arbitrary code via a crafted PHP...
9.8CVSS
9.5AI Score
0.003EPSS
An arbitrary file upload vulnerability at /admin/ajax.php in zbzcms v1.0 allows attackers to execute arbitrary code via a crafted PHP...
9.8CVSS
9.5AI Score
0.003EPSS
zbzcms v1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the neirong parameter at...
6.1CVSS
6AI Score
0.001EPSS
zbzcms v1.0 was discovered to contain a SQL injection vulnerability via the art parameter at...
9.8CVSS
9.8AI Score
0.002EPSS
zbzcms v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at...
6.5CVSS
6.8AI Score
0.001EPSS
An incorrect access control issue at /admin/run_ajax.php in zbzcms v1.0 allows attackers to arbitrarily add administrator...
9.8CVSS
9.3AI Score
0.003EPSS
zbzcms v1.0 was discovered to contain an arbitrary file deletion vulnerability via...
9.1CVSS
9.2AI Score
0.001EPSS