CVE-2019-12349

An issue was discovered in zzcms 2019. SQL Injection exists in /admin/dlsendsms.php via the id parameter...

CVE-2019-12350

An issue was discovered in zzcms 2019. SQL Injection exists in dl/dldownload.php via an id parameter value with a trailing comma...

CVE-2019-12350

An issue was discovered in zzcms 2019. SQL Injection exists in dl/dldownload.php via an id parameter value with a trailing comma...

CVE-2019-12349

An issue was discovered in zzcms 2019. SQL Injection exists in /admin/dlsendsms.php via the id parameter...

Sql injection

An issue was discovered in zzcms 2019. SQL Injection exists in dl/dldownload.php via an id parameter value with a trailing comma...

Sql injection

An issue was discovered in zzcms 2019. SQL Injection exists in dl/dlprint.php via an id parameter value with a trailing comma...

Sql injection

An issue was discovered in zzcms 2019. SQL Injection exists in /admin/dlsendsms.php via the id parameter...

CVE-2019-12350

An issue was discovered in zzcms 2019. SQL Injection exists in dl/dldownload.php via an id parameter value with a trailing comma...

CVE-2019-12350

CVE-2019-12350 affects zzCMS (2019) with a SQL Injection in the script /dl/dl_download.php where an id parameter value with a trailing comma is unsafely handled. Root cause: lack of input filtering/validation for the id parameter, enabling injection. Consequences per the entry indicate a high-sev...

CVE-2019-12349

An issue was discovered in zzcms 2019. SQL Injection exists in /admin/dlsendsms.php via the id parameter...

CVE-2019-12349

The CVE-2019-12349 entry applies to the zzCMS 2019 CMS, where a SQL injection exists in /admin/dl_sendsms.php via the id parameter. The vulnerability is rooted in improper handling of the id input, with public sources citing the lack of single quotes as the underlying cause (CNVD-2022-56481, RH a...

CVE-2019-12351

An issue was discovered in zzcms 2019. SQL Injection exists in dl/dlprint.php via an id parameter value with a trailing comma...

CVE-2019-12351

CVE-2019-12351 affects zzCMS (2019) with SQL Injection in /dl/dl_print.php via the id parameter, caused by insufficient input validation (trailing comma). Public references in connected docs confirm the vulnerability pattern but do not provide exploit details or patches. Impact per CVSS in initia...

ZZCMS SQL注入漏洞

ZZCMS is a content management system CMS by the ZZCMS team in China. zzCMS version 2019 is vulnerable to SQL injection, which stems from the lack of single quotes in the id parameter of /admin/dlsendsms.php. No detailed vulnerability details are currently available...

ZZCMS SQL注入漏洞

ZZCMS is a content management system CMS from the ZZCMS team in China. zzCMS version 2019 is vulnerable to SQL injection, which stems from the lack of security filtering of the id parameter in /dl/dldownload.php. No detailed vulnerability details are provided at this time...

ZZCMS Cross-Site Scripting Vulnerability (CNVD-2022-71404)

ZZCMS is a content management system CMS from the Zzcms team in China. ZZCMS 2021 is vulnerable to a cross-site scripting vulnerability that originates from a lack of restriction and filtering of user parameters in admanage.php. An attacker could exploit this vulnerability to execute client-side...

ZZCMS SQL Injection Vulnerability (CNVD-2022-56482)

ZZCMS is a content management system CMS from the Zzcms team in China. zzCMS2021 is vulnerable to SQL injection, which stems from a lack of filtering of SQL data in admanage.php. An attacker could use this vulnerability to send malicious SQL commands...

CVE-2021-46436

An issue was discovered in ZZCMS 2021. There is a SQL injection vulnerability in admanage.php...

CVE-2021-46436

An issue was discovered in ZZCMS 2021. There is a SQL injection vulnerability in admanage.php...

CVE-2021-46437

An issue was discovered in ZZCMS 2021. There is a cross-site scripting XSS vulnerability in admanage.php...