CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

Rapid7 Vulnerability Database (full)•added 2022/06/17 12:00 a.m.•8 views

CVE-2019-12353: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin/dlsendmail.php when the attacker has admin authority via the id parameter...

7.2CVSS7.1AI score0.00942EPSS

SaveExploits1References2

Prion•added 2021/12/09 4:15 p.m.•21 views

Sql injection

An SQL Injection vulnerablitly exits in zzcms 8.2, 8.3, 2020, and 2021 via the id parameter in admin/dlsendmail.php...

6.5CVSS7.5AI score0.01134EPSS

SaveExploits1References1Affected Software1

Rapid7 Vulnerability Database (full)•added 2021/12/09 12:00 a.m.•2 views

CVE-2021-40280: Improper Neutralization of Special Elements used in an SQL Command

An SQL Injection vulnerablitly exits in zzcms 8.2, 8.3, 2020, and 2021 via the id parameter in admin/dlsendmail.php...

7.2CVSS5.8AI score0.01134EPSS

SaveExploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by