CVE-2022-40447

ZZCMS 2022 was discovered to contain a SQL injection vulnerability via the keyword parameter at /admin/baojialist.php...

CVE-2022-40446

ZZCMS 2022 was discovered to contain a SQL injection vulnerability via the component /admin/sendmailto.php?tomail=&groupid=...

CVE-2022-40446

ZZCMS 2022 was discovered to contain a SQL injection vulnerability via the component /admin/sendmailto.php?tomail=&groupid=...

CVE-2022-40446

ZZCMS 2022 was discovered to contain a SQL injection vulnerability via the component /admin/sendmailto.php?tomail=&groupid=...

CVE-2022-40446

CVE-2022-40446 affects ZZCMS 2022; a SQL injection exists in the admin/sendmailto.php endpoint via the parameters tomail and groupid, due to lack of input validation. This vulnerability is described across multiple sources (Red Hat, CNVD, CVE records, OSV, CNVD) with a high impact (C, I, A) and n...

CVE-2022-40444

ZZCMS 2022 was discovered to contain a full path disclosure vulnerability via the page /admin/index.PHP? server...

CVE-2022-40444

Summary: CVE-2022-40444 affects ZZCMS 2022 and enables a full path disclosure through the admin URL /admin/index.PHP? _server, leaking the server file path via error information. The root cause is inadequate protection of sensitive information in ZZCMS 2022 (per multiple sources). Affected produc...

CVE-2022-40444

ZZCMS 2022 was discovered to contain a full path disclosure vulnerability via the page /admin/index.PHP? server...

CVE-2022-40444

ZZCMS 2022 was discovered to contain a full path disclosure vulnerability via the page /admin/index.PHP? server...

CVE-2022-40443

An absolute path traversal vulnerability in ZZCMS 2022 allows attackers to obtain sensitive information via a crafted GET request sent to /one/siteinfo.php...

CVE-2022-40443

An absolute path traversal vulnerability in ZZCMS 2022 allows attackers to obtain sensitive information via a crafted GET request sent to /one/siteinfo.php...

CVE-2022-40443

CVE-2022-40443 affects ZZCMS 2022 and is a path traversal vulnerability that allows an attacker to disclose sensitive information from the server’s filesystem by crafting a GET request to /one/siteinfo.php. The issue is exploitable remotely with no authentication (network access, low attack compl...

CVE-2022-40443

An absolute path traversal vulnerability in ZZCMS 2022 allows attackers to obtain sensitive information via a crafted GET request sent to /one/siteinfo.php...

PT-2022-25390 · Zzcms · Zzcms

Name of the Vulnerable Software and Affected Versions: ZZCMS version 2022 Description: The issue is related to a SQL injection vulnerability. It occurs via the keyword parameter at the "/admin/baojia list.php" API endpoint. Recommendations: For ZZCMS version 2022, avoid using the keyword paramete...

PT-2022-25388 · Zzcms · Zzcms

Name of the Vulnerable Software and Affected Versions: ZZCMS version 2022 Description: An absolute path traversal issue allows attackers to obtain sensitive information via a crafted GET request sent to "/one/siteinfo.php". Recommendations: For ZZCMS version 2022, as a temporary workaround,...

ZZCMS 路径遍历漏洞

ZZCMS is a content management system CMS by the ZZCMS team in China. An information disclosure vulnerability exists in ZZCMS 2022, which stems from the program's inadequate protection of sensitive information, and can be exploited by an attacker to send a request to "/admin/index php?Server" to...

PT-2022-25389 · Zzcms · Zzcms

Name of the Vulnerable Software and Affected Versions: ZZCMS version 2022 Description: A full path disclosure issue was discovered in ZZCMS 2022. This issue can be exploited via the "/admin/index.PHP? server" API endpoint. Recommendations: For ZZCMS version 2022, consider restricting access to th...

ZZCMS SQL注入漏洞

ZZCMS is a content management system CMS by the ZZCMS team in China. A SQL injection vulnerability exists in ZZCMS version 2022, which originates from /admin/sendmailto.php?tomail=&groupid= lack of validation of externally entered SQL statements. An attacker can exploit the vulnerability to execu...

PT-2022-6559 · Zzcms · Zzcms

Name of the Vulnerable Software and Affected Versions: ZZCMS version 2022 Description: The issue is related to a SQL injection vulnerability in the ZZCMS system, specifically in the admin/sendmailto.php component. This vulnerability arises from the lack of protection against SQL query structure...

ZZCMS SQL Injection Vulnerability (CNVD-2022-58306)

ZZCMS is a content management system CMS by the ZZCMS team in China. A security vulnerability exists in ZZCMS 2019 version, which can be exploited by an attacker to perform a SQL injection attack via the id parameter in /user/dlsdownload.php...