3 matches found
CVE-2022-27127
zbzcms v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php/ajax.php...
7AI score0.00704EPSS
SaveExploits0References1
CVE-2022-27125: Improper Neutralization of Input During Web Page Generation
zbzcms v1.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the neirong parameter at /php/ajax.php...
6.1CVSS6.2AI score0.00615EPSS
SaveExploits0References2
CVE-2022-27127: Improper Neutralization of Special Elements used in an SQL Command
zbzcms v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php/ajax.php...
6.5CVSS6.6AI score0.00704EPSS
SaveExploits0References2
20