CVE-2015-7347: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in ZCMS JavaServer Pages Content Management System 1.1...

Sql injection

SQL injection vulnerability in ZCMS 1.1...

CVE-2015-7346

SQL injection vulnerability in ZCMS 1.1...

CVE-2015-7346

CVE-2015-7346 affects ZCMS 1.1 (Zeyuan Web Content Management System). The connected documents confirm a SQL injection vulnerability in ZCMS 1.1 that can bypass authentication to reach the admin area, caused by constructing queries via string concatenation (e.g., vulnerable login query). Public e...

CVE-2015-7346

SQL injection vulnerability in ZCMS 1.1...

zcms 2.x 后台投稿处 存储型XSS和CSRF漏洞

No description provided by source...

ZCMS(JSP) V1.1 登陆绕过&SQL注入&跨站漏洞

No description provided by source...

ZvingSoft SQL Injection Vulnerability

ZvingSoft ZCMS is a set of enterprise-level web content management system CMS based on J2EE technology and AJAX technology. ZvingSoft ZCMS suffers from a SQL injection vulnerability that could be exploited by remote attackers to submit specially crafted SQL queries to manipulate or obtain databas...

ZvingSoft HTML Injection Vulnerability

ZvingSoft ZCMS is a set of enterprise-level web content management system CMS based on J2EE technology and AJAX technology. ZvingSoft ZCMS suffers from an HTML injection vulnerability, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be...

ZCMS 1.1 - Multiple Vulnerabilities

ZCMS 1.1 - Multiple Vulnerabilities Exploit Title: SQL Injection & Persistent XSS Google Dork: intitle: SQL Injection & Persistent XSS Date: 2015-06-12 Exploit Author: John Page hyp3rlinx Website: hyp3rlinx.altervista.org Vendor Homepage: zencherry.com Software Link:...

ZCMS 1.3 final background verification bypass vulnerability and solution-vulnerability warning-the black bar safety net

Brief description: SSO. jsp The file is a logic error Detailed description: SSO. a jsp file is a logic error % String username = request. getParameter"u"; String time = request. getParameter"t"; String str = request. getParameter"s"; String key = "WIU%&DJAJKL%^WDLJIST"; String s = StringUtil...