CVE-2019-8411

admin/dldata.php in zzcms 2018 2018-10-19 allows remote attackers to delete arbitrary files via action=del&filename=../ directory traversal...

CVE-2019-8411

The CVE-2019-8411 entry concerns zzcms (2018 release) where admin/dl_data.php enables a directory-traversal vulnerability. The underlying issue allows remote attackers to delete arbitrary files by crafting filename via action=del&filename=../, exposing an impact on integrity and availability stat...

SQL Injection Vulnerability in ZZCMS ad***.php Page

ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A SQL injection vulnerability exists in the ZZCMS ad.php page, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in ZZCMS ad***.php

ZZCMS is a free and open source website building system, mainly facing the majority of webmasters. ZZCMS ad.php SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information database...

Arbitrary file deletion vulnerability in ZZCMS full version

ZZCMS is a free and open source website building system, mainly facing the majority of webmasters. ZZCMS full version of the existence of arbitrary file deletion vulnerability. The vulnerability stems from a problem in the logic of admin/dl.php, which leads to the deletion of arbitrary files from...

Unauthorized Access Vulnerability in Full Version of ZZCMS

ZZCMS is a free and open source website building system, mainly facing the majority of webmasters. ZZCMS full version of unauthorized access vulnerability. The vulnerability stems from the website directory/admin/ad.php logic there are problems , you can directly disable java or use burp to modif...

CVE-2018-18791

An issue was discovered in zzcms 8.3. SQL Injection exists in zs/search.php via a pxzs cookie...

CVE-2018-18789

An issue was discovered in zzcms 8.3. SQL Injection exists in zt/top.php via a Host HTTP header to zt/news.php...

CVE-2018-18791

An issue was discovered in zzcms 8.3. SQL Injection exists in zs/search.php via a pxzs cookie...

CVE-2018-18792

An issue was discovered in zzcms 8.3. SQL Injection exists in zs/zslist.php via a pxzs cookie...

CVE-2018-18789

An issue was discovered in zzcms 8.3. SQL Injection exists in zt/top.php via a Host HTTP header to zt/news.php...

CVE-2018-18786

An issue was discovered in zzcms 8.3. SQL Injection exists in ajax/zs.php via a pxzs cookie...

CVE-2018-18787

An issue was discovered in zzcms 8.3. SQL Injection exists in zs/zs.php via a pxzs cookie...

CVE-2018-18790

An issue was discovered in zzcms 8.3. SQL Injection exists in admin/specialadd.php via a zxbigclassid cookie. This needs an admin user login...

CVE-2018-18792

An issue was discovered in zzcms 8.3. SQL Injection exists in zs/zslist.php via a pxzs cookie...

CVE-2018-18786

An issue was discovered in zzcms 8.3. SQL Injection exists in ajax/zs.php via a pxzs cookie...

CVE-2018-18788

An issue was discovered in zzcms 8.3. SQL Injection exists in admin/classmanage.php via the tablename parameter. This needs an admin user login...

CVE-2018-18787

An issue was discovered in zzcms 8.3. SQL Injection exists in zs/zs.php via a pxzs cookie...

CVE-2018-18788

An issue was discovered in zzcms 8.3. SQL Injection exists in admin/classmanage.php via the tablename parameter. This needs an admin user login...

CVE-2018-18790

An issue was discovered in zzcms 8.3. SQL Injection exists in admin/specialadd.php via a zxbigclassid cookie. This needs an admin user login...