CVE-2021-45286

CVE-2021-45286 : A directory traversal vulnerability affects ZZCMS 2021, exploitable via the skin parameter in 1) index.php, 2) bottom.php, and 3) top_index.php. The issue is rooted in improper input handling that allows accessing paths outside the intended directory. Documented impact centers on...

CVE-2021-45286

Directory Traversal vulnerability exists in ZZCMS 2021 via the skin parameter in 1 index.php, 2 bottom.php, and 3 topindex.php...

ZZCMS 路径遍历漏洞

ZZCMS is a content management system CMS from the China Zzcms team. ZZCMS suffers from a path traversal vulnerability that arises from a failure of a networked system or product to properly filter special elements in the path of a resource or file. An attacker can exploit this vulnerability to...

ZZCMS SQL Injection Vulnerability (CNVD-2021-101691)

ZZCMS is a content management system CMS from the Zzcms team in China.ZZCMS is vulnerable to SQL injection in 2021, which stems from a lack of validation of external input SQL statements in the askbigclassid parameter of /admin/ask.php in the application. An attacker could use this vulnerability ...

CVE-2021-42945

A SQL Injection vulnerability exists in ZZCMS 2021 via the askbigclassid parameter in /admin/ask.php...

CVE-2021-42945

A SQL Injection vulnerability exists in ZZCMS 2021 via the askbigclassid parameter in /admin/ask.php...

CVE-2021-42945

A SQL Injection vulnerability exists in ZZCMS 2021 via the askbigclassid parameter in /admin/ask.php...

Sql injection

A SQL Injection vulnerability exists in ZZCMS 2021 via the askbigclassid parameter in /admin/ask.php...

CVE-2021-42945

A SQL Injection vulnerability exists in ZZCMS 2021 via the askbigclassid parameter in /admin/ask.php...

CVE-2021-42945

CVE-2021-42945 is a confirmed SQL Injection in ZZCMS 2021, exploitable via the askbigclassid parameter in /admin/ask.php. The vulnerability stems from lack of input validation on external SQL statements, allowing an attacker to execute arbitrary SQL commands and potentially exfiltrate sensitive d...

zzcms cross-site scripting vulnerability

ZZCMS is a content management system CMS by Zzcms team in China. A cross-site scripting vulnerability exists in zzcms, which stems from a lack of effective filtering and escaping of modified user actions in ad.php in the software. No details of the vulnerability are available at this time...

CVE-2020-19042

Cross Site Scripting XSS vulnerability exists in zzcms 2019 XSS via a modify action in user/adv.php...

CVE-2020-19042

Cross Site Scripting XSS vulnerability exists in zzcms 2019 XSS via a modify action in user/adv.php...

Cross site scripting

Cross Site Scripting XSS vulnerability exists in zzcms 2019 XSS via a modify action in user/adv.php...

CVE-2020-19042

CVE-2020-19042 affects zzcms (2019) XSS via a modify action in user/adv.php. Root cause cited across sources as insufficient input filtering/escaping for modified user actions (ad.php/adv.php). Impact: cross-site scripting vulnerability; no exploitation details or official patch information provi...

CVE-2020-19042

Cross Site Scripting XSS vulnerability exists in zzcms 2019 XSS via a modify action in user/adv.php...

zzcms 跨站脚本漏洞

ZZCMS is a content management system CMS by Zzcms team in China. A cross-site scripting vulnerability exists in zzcms, which stems from a lack of effective filtering and escaping of modified user actions in ad.php in the software. No details of the vulnerability are available at this time...

ZZCMS dl_sendmail.php SQL Injection Vulnerability

ZZCMS is a content management system CMS from the Zzcms team in China. ZZCMS is vulnerable to SQL injection, which stems from a missing validation of externally entered SQL statements in the id parameter of admin/dlsendmail.php. An attacker could use this vulnerability to execute illegal SQL...

zzcms SQL Injection Vulnerability (CNVD-2021-99763)

ZZCMS is a content management system CMS from the Zzcms team in China. zzcms is vulnerable to SQL injection, which allows an attacker to use the id parameter in admin/bad.php with a lack of validation for external input SQL statements. An attacker can use the vulnerability to execute illegal SQL...

ZZCMS Access Control Error Vulnerability

ZZCMS is a content management system CMS from the Zzcms team in China. ZZCMS suffers from an access control error vulnerability that stems from an incorrect access control vulnerability in zzcms via admin.php, which can be exploited by an attacker to directly access the administrator console afte...