986 matches found
Privilege escalation
ZZCMS 2023 has a file upload vulnerability in 3/Ebak5.1/upload/index.php, allowing attackers to exploit this loophole to gain server privileges and execute arbitrary code...
CVE-2023-50104
ZZCMS 2023 contains a file upload vulnerability in /E_bak5.1/upload/index.php that can be exploited to gain server privileges and execute arbitrary code. Affected component is the file upload functionality of ZZCMS 2023; root cause described as lack of proper validation for uploaded files. Exploi...
CVE-2023-50104
ZZCMS 2023 has a file upload vulnerability in 3/Ebak5.1/upload/index.php, allowing attackers to exploit this loophole to gain server privileges and execute arbitrary code...
CVE-2023-42398
An issue in zzCMS v.2023 allows a remote attacker to execute arbitrary code and obtain sensitive information via the ueditor component in controller.php...
CVE-2023-42398
An issue in zzCMS v.2023 allows a remote attacker to execute arbitrary code and obtain sensitive information via the ueditor component in controller.php...
CVE-2023-42398
An issue in zzCMS v.2023 allows a remote attacker to execute arbitrary code and obtain sensitive information via the ueditor component in controller.php...
CVE-2023-42398
An issue in zzCMS v.2023 allows a remote attacker to execute arbitrary code and obtain sensitive information via the ueditor component in controller.php...
CVE-2023-42398
An issue in zzCMS v.2023 allows a remote attacker to execute arbitrary code and obtain sensitive information via the ueditor component in controller.php...
CVE-2023-42398
The CVE-2023-42398 issue affects zzCMS v.2023, where an attacker can remotely execute arbitrary code and disclose sensitive data through the ueditor component in controller.php. The vulnerability is associated with zzCMS 2023 and involves the ueditor integration in controller.php, enabling code e...
ZZCMS Code Issues Vulnerabilities
ZZCMS is a content management system CMS from the China ZZCMS team. A security vulnerability exists in ZZCMS v.2023, which can be exploited to execute arbitrary code and obtain sensitive information via the ueditor component in controller.php...
CVE-2023-36162
Cross Site Request Forgery vulnerability in ZZCMS v.2023 and earlier allows a remote attacker to gain privileges via the add function in adminlist.php...
CVE-2023-36162
Cross Site Request Forgery vulnerability in ZZCMS v.2023 and earlier allows a remote attacker to gain privileges via the add function in adminlist.php...
CVE-2023-36162
Cross Site Request Forgery vulnerability in ZZCMS v.2023 and earlier allows a remote attacker to gain privileges via the add function in adminlist.php...
Cross site request forgery (csrf)
Cross Site Request Forgery vulnerability in ZZCMS v.2023 and earlier allows a remote attacker to gain privileges via the add function in adminlist.php...
CVE-2023-36162
Cross Site Request Forgery vulnerability in ZZCMS v.2023 and earlier allows a remote attacker to gain privileges via the add function in adminlist.php...
CVE-2023-36162
Cross Site Request Forgery vulnerability in ZZCMS v.2023 and earlier allows a remote attacker to gain privileges via the add function in adminlist.php...
CVE-2023-36162
CVE-2023-36162 concerns ZZCMS versions 2023 and earlier, where a Cross-Site Request Forgery (CSRF) flaw in the add function of adminlist.php enables a remote attacker to escalate privileges. Affected component is ZZCMS, with the root cause described as CSRF leading to privilege gains; CVSS v3.1 m...
PT-2023-25462 · Zzcms · Zzcms
Name of the Vulnerable Software and Affected Versions: ZZCMS versions 2023 and earlier Description: The issue allows a remote attacker to gain privileges via the add function in adminlist.php. This is a Cross Site Request Forgery vulnerability. Recommendations: For ZZCMS versions 2023 and earlier...
ZZCMS 跨站请求伪造漏洞
ZZCMS is a content management system CMS from the China ZZCMS team. A cross-site request forgery vulnerability exists in ZZCMS v.2023, which originates from a vulnerability that allows remote attackers to gain privileges via the add function in adminlist.php...
The vulnerability in the admin/sendmailto.php script of the ZZCMS CMS system allows a hacker to execute arbitrary SQL code.
The vulnerability in the admin/sendmailto.php script of the ZZCMS CMS system relates to the lack of protection for the SQL query structure when processing the parameter tomail=&groupid=. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code remotely...