CVE-2022-44361

An issue was discovered in ZZCMS 2022. There is a cross-site scripting XSS vulnerability in admin/adlist.php...

CVE-2022-44361

An issue was discovered in ZZCMS 2022. There is a cross-site scripting XSS vulnerability in admin/adlist.php...

Cross site scripting

An issue was discovered in ZZCMS 2022. There is a cross-site scripting XSS vulnerability in admin/adlist.php...

CVE-2022-44361

An issue was discovered in ZZCMS 2022. There is a cross-site scripting XSS vulnerability in admin/adlist.php...

CVE-2022-44361

CVE-2022-44361 affects ZZCMS 2022, fixed in admin/ad_list.php XSS. Root cause: insufficient input sanitization in the admin/ad_list.php component leading to cross-site scripting. CVSSv3.1 base score 5.4 (Network, Low attack complexity, User interaction required, Privileges Low, Confidentiality/In...

CVE-2022-44361

An issue was discovered in ZZCMS 2022. There is a cross-site scripting XSS vulnerability in admin/adlist.php...

ZZCMS 跨站脚本漏洞

ZZCMS is a content management system CMS from the ZZCMS team in China. A security vulnerability exists in ZZCMS version 2022, which stems from its admin/adlist.php component that allows attackers to implement cross-site scripting...

ZZCMS index php information leakage vulnerability

ZZCMS is a content management system CMS by the ZZCMS team in China. An information disclosure vulnerability exists in ZZCMS 2022, which stems from the program's inadequate protection of sensitive information, and can be exploited by an attacker to send a request to "/admin/index php?Server" to...

ZZCMS sendmailto.php SQL Injection Vulnerability

ZZCMS is a content management system CMS by the ZZCMS team in China. A SQL injection vulnerability exists in ZZCMS version 2022, which originates from /admin/sendmailto.php?tomail=&groupid= lack of validation of externally entered SQL statements. An attacker can exploit the vulnerability to execu...

CVE-2022-40447

ZZCMS 2022 was discovered to contain a SQL injection vulnerability via the keyword parameter at /admin/baojialist.php...

CVE-2022-40446

ZZCMS 2022 was discovered to contain a SQL injection vulnerability via the component /admin/sendmailto.php?tomail=&groupid=...

CVE-2022-40443

An absolute path traversal vulnerability in ZZCMS 2022 allows attackers to obtain sensitive information via a crafted GET request sent to /one/siteinfo.php...

CVE-2022-40444

ZZCMS 2022 was discovered to contain a full path disclosure vulnerability via the page /admin/index.PHP? server...

Path traversal

An absolute path traversal vulnerability in ZZCMS 2022 allows attackers to obtain sensitive information via a crafted GET request sent to /one/siteinfo.php...

Sql injection

ZZCMS 2022 was discovered to contain a SQL injection vulnerability via the keyword parameter at /admin/baojialist.php...

Path traversal

ZZCMS 2022 was discovered to contain a full path disclosure vulnerability via the page /admin/index.PHP? server...

Sql injection

ZZCMS 2022 was discovered to contain a SQL injection vulnerability via the component /admin/sendmailto.php?tomail=&groupid=...

CVE-2022-40447

ZZCMS 2022 was discovered to contain a SQL injection vulnerability via the keyword parameter at /admin/baojialist.php...

CVE-2022-40447

ZZCMS 2022 was discovered to contain a SQL injection vulnerability via the keyword parameter at /admin/baojialist.php...

CVE-2022-40447

CVE-2022-40447 affects ZZCMS 2022 with a SQL injection in the admin/baojia_list.php endpoint through the keyword parameter. The vulnerability is described as an SQL injection (concrete vulnerable vector: keyword parameter) and is rated with CVSS 3.1: 7.2 (HIGH) with network attack vector, low att...