Cross Site Scripting vulnerability in ZZCMS v.2023 and before allows a remote attacker to obtain sensitive information via the HTTPReferer header of the caina.php component...
5.4CVSS5.8AI score0.00376EPSS
SaveExploits1References1
OSV•added 2024/09/04 4:15 p.m.•9 views
CVE-2024-44817
SQL Injection vulnerability in ZZCMS v.2023 and before allows a remote attacker to obtain sensitive information via the id parameter in the adv2.php component...