5 matches found
PT-2025-29932 · Zcms · Zcms
Name of the Vulnerable Software and Affected Versions: ZCMS version 3.6.0 Description: A problematic issue exists in ZCMS 3.6.0 within the Create Article Page component. Manipulation of the Title argument can lead to cross-site scripting. The attack can be initiated remotely, and the exploit has...
CVE-2022-28521
ZCMS v20170206 was discovered to contain a file inclusion vulnerability via index.php?m=home=home=spsetconfig...
CVE-2022-28521
ZCMS v20170206 was discovered to contain a file inclusion vulnerability via index.php?m=home&c=home&a=spsetconfig...
CVE-2022-28522
ZCMS v20170206 was discovered to contain a stored cross-site scripting XSS vulnerability via index.php?m=home&c=message&a=add...
CVE-2022-28521
ZCMS v20170206 was discovered to contain a file inclusion vulnerability via index.php?m=home&c=home&a=spsetconfig...