3 matches found
Sql injection
zbzcms v1.0 was discovered to contain a SQL injection vulnerability via the art parameter at /include/make.php...
7.5CVSS9.8AI score0.01036EPSS
SaveExploits0References1Affected Software1
PT-2022-18235
Name of the Vulnerable Software and Affected Versions zbzcms version 1.0 Description A SQL injection issue was found in zbzcms via the art parameter at the "/include/make.php" API endpoint. Recommendations For zbzcms version 1.0, avoid using the art parameter in the "/include/make.php" endpoint...
9.8CVSS5.8AI score0.01036EPSS
SaveExploits0References2
CVE-2022-27126: Improper Neutralization of Special Elements used in an SQL Command
zbzcms v1.0 was discovered to contain a SQL injection vulnerability via the art parameter at /include/make.php...
9.8CVSS8.2AI score0.01036EPSS
SaveExploits0References2
20