50 matches found
CVE-2022-28521
ZCMS v20170206 was discovered to contain a file inclusion vulnerability via index.php?m=home&c=home&a=spsetconfig...
Design/Logic Flaw
ZCMS v20170206 was discovered to contain a file inclusion vulnerability via index.php?m=home&c=home&a=spsetconfig...
Cross site scripting
ZCMS v20170206 was discovered to contain a stored cross-site scripting XSS vulnerability via index.php?m=home&c=message&a=add...
CVE-2022-28522
ZCMS v20170206 contains a stored XSS vulnerability in index.php?m=home&c=message&a=add. The root cause is a stored cross-site scripting flaw in the message add endpoint, allowing injection that can affect other users. According to the provided sources, the impact is C=L/I=L (partial integrity imp...
CVE-2022-28522
ZCMS v20170206 was discovered to contain a stored cross-site scripting XSS vulnerability via index.php?m=home&c=message&a=add...
CVE-2022-28521
ZCMS v20170206 was discovered to contain a file inclusion vulnerability via index.php?m=home&c=home&a=spsetconfig...
CVE-2022-28521
CVE-2022-28521 affects ZCMS v20170206 (thinkphp-zcms). The vulnerability is a file inclusion flaw in index.php?m=home&c=home&a=sp_set_config that can lead to arbitrary code execution. Several sources (NVD, CNVD/CNNVD, Red Hat, PRION) corroborate the file inclusion risk; exploitation status is not...
ZCMS 安全漏洞
thinkphp-zcms is a cms system developed based on thinkphp3.2. thinkphp-zcms has a file inclusion vulnerability that can be exploited by attackers to execute arbitrary code...
CVE-2022-28521: Undefined Security Weakness
ZCMS v20170206 was discovered to contain a file inclusion vulnerability via index.php?m=home&c=home&a=spsetconfig...
CVE-2022-28522: Improper Neutralization of Input During Web Page Generation
ZCMS v20170206 was discovered to contain a stored cross-site scripting XSS vulnerability via index.php?m=home&c=message&a=add...
CVE-2020-19705
thinkphp-zcms as of 20190715 allows SQL injection via index.php?m=home&c=message&a=add...
CVE-2020-19705
thinkphp-zcms as of 20190715 allows SQL injection via index.php?m=home&c=message&a=add...
Sql injection
thinkphp-zcms as of 20190715 allows SQL injection via index.php?m=home&c=message&a=add...
CVE-2020-19705
thinkphp-zcms as of 20190715 allows SQL injection via index.php?m=home&c=message&a=add...
CVE-2020-19705: Improper Neutralization of Special Elements used in an SQL Command
thinkphp-zcms as of 20190715 allows SQL injection via index.php?m=home&c=message&a=add...
thinkphp-zcms SQL注入漏洞
thinkphp-zcms is open source based on thinkphp3.2 development of a cms system , more comprehensive features . thinkphp-zcms There is a SQL injection vulnerability , an attacker can use the vulnerability through index.php?m=home&c=message&a=add to execute arbitrary SQL commands...
CVE-2015-7347
Cross-site scripting XSS vulnerability in ZCMS JavaServer Pages Content Management System 1.1...
Cross site scripting
Cross-site scripting XSS vulnerability in ZCMS JavaServer Pages Content Management System 1.1...
CVE-2015-7347
CVE-2015-7347 affects ZCMS 1.1 JavaServer Pages Content Management System. The connected sources confirm a cross-site scripting (XSS) vulnerability in ZCMS 1.1 (no detailed root cause in the provided docs). Public exploit references exist (Exploit-DB and PacketStorm) describing XSS and SQL Inject...