768 matches found
CVE-2019-1010150
zzcms 8.3 and earlier is affected by: File Delete to Code Execution. The impact is: getshell. The component is: /user/zssave.php...
CVE-2019-1010152
zzcms 8.3 and earlier is affected by: File Delete to Code Execution. The impact is: getshell. The component is: user/manage.php line 31-80...
CVE-2019-1010153
zzcms 8.3 and earlier is affected by: SQL Injection. The impact is: sql inject. The component is: zs/subzs.php...
CVE-2019-1010149
zzcms version 8.3 and earlier is affected by: File Delete to Code Execution. The impact is: zzcms File Delete to Code Execution. The component is: user/licencesave.php...
CVE-2019-1010148
zzcms version 8.3 and earlier is affected by: SQL Injection. The impact is: zzcms File Delete to Code Execution...
CVE-2019-1010153
zzcms 8.3 and earlier is affected by: SQL Injection. The impact is: sql inject. The component is: zs/subzs.php...
Remote code execution
zzcms version 8.3 and earlier is affected by: File Delete to Code Execution. The impact is: zzcms File Delete to Code Execution. The component is: user/licencesave.php...
Sql injection
zzcms 8.3 and earlier is affected by: SQL Injection. The impact is: sql inject. The component is: zs/subzs.php...
Code injection
zzcms 8.3 and earlier is affected by: File Delete to Code Execution. The impact is: getshell. The component is: user/manage.php line 31-80...
Sql injection
zzcms version 8.3 and earlier is affected by: SQL Injection. The impact is: zzcms File Delete to Code Execution...
CVE-2019-1010153
zzcms 8.3 and earlier is affected by: SQL Injection. The impact is: sql inject. The component is: zs/subzs.php...
CVE-2019-1010152
CVE-2019-1010152 affects ZZCMS (version 8.3 and earlier). The vulnerability is in user/manage.php (lines 31–80) and is described as a file-delete-to-code-execution issue, with the impact stated as getshell. Other connected records reinforce the same affected component and impact, without providin...
CVE-2019-1010152
zzcms 8.3 and earlier is affected by: File Delete to Code Execution. The impact is: getshell. The component is: user/manage.php line 31-80...
CVE-2019-1010150
ZZCMS version 8.3 and earlier is affected by a vulnerability in the /user/zssave.php component that allows Code Execution via File Delete, effectively enabling an attacker to obtain a shell (getshell). This CVE (CVE-2019-1010150) is documented with risk details indicating network-based access and...
CVE-2019-1010150
zzcms 8.3 and earlier is affected by: File Delete to Code Execution. The impact is: getshell. The component is: /user/zssave.php...
CVE-2019-1010149
The CVE-2019-1010149 entry affects ZZCMS, specifically versions 8.3 and earlier, due to a vulnerability in the user/licence_save.php component that can lead to File Delete to Code Execution. Impact is described as code execution within ZZCMS. Documents do not provide exploitation details, affecte...
CVE-2019-1010149
zzcms version 8.3 and earlier is affected by: File Delete to Code Execution. The impact is: zzcms File Delete to Code Execution. The component is: user/licencesave.php...
CVE-2019-1010148
zzcms version 8.3 and earlier is affected by: SQL Injection. The impact is: zzcms File Delete to Code Execution...
PT-2019-12918 · Typo3 · Typo3
Name of the Vulnerable Software and Affected Versions: TYPO3 versions 8.3.0 through 8.7.26 TYPO3 versions 9.0.0 through 9.5.7 Description: The issue allows for cross-site scripting XSS, which is a type of attack where an attacker can inject malicious scripts into a website, potentially leading to...
CVE-2018-20807
An XSS issue has been found in welcome.cgi in Pulse Secure Pulse Connect Secure PCS 8.1.x before 8.1R12, 8.2.x before 8.2R9, and 8.3.x before 8.3R3 due to one of the URL parameters not being sanitized properly...