CVE-2018-18787

An issue was discovered in zzcms 8.3. SQL Injection exists in zs/zs.php via a pxzs cookie...

CVE-2018-18787

CVE-2018-18787 concerns zzcms version 8.3, with SQL injection in the zs/zs.php handler triggered via a pxzs cookie. The root cause is improper input handling leading to SQL injection, according to the NVD entry. The available references identify the vulnerability class and affected component, but...

CVE-2018-18788

An issue was discovered in zzcms 8.3. SQL Injection exists in admin/classmanage.php via the tablename parameter. This needs an admin user login...

CVE-2018-18792

The CVE-2018-18792 issue affects ZZCMS v8.3, with a SQL Injection in zs/zs_list.php exploitable via the pxzs cookie. The root cause is improper handling of input in that endpoint, enabling an attacker to read data from the MySQL user context. Public references in the connected records confirm the...

CVE-2018-18786

An issue was discovered in zzcms 8.3. SQL Injection exists in ajax/zs.php via a pxzs cookie...

CVE-2018-18790

CVE-2018-18790 affects ZZCMS 8.3. An SQL Injection exists in admin/special_add.php exploitable via the zxbigclassid cookie (admin login required). The issue can lead to partial disclosure/integrity/availability impact with high severity per CVSSv3 (HIGH for confidentiality, integrity, availabilit...

CVE-2018-18784

An issue was discovered in zzcms 8.3. SQL Injection exists in admin/tagmanage.php via the tabletag parameter. This needs an admin user login...

CVE-2018-18788

CVE-2018-18788 affects ZZCMS v8.3, where SQL injection exists in the admin/classmanage.php file via the unvalidated tablename parameter. The vulnerability requires an admin user login and can allow an attacker to read MySQL data (e.g., current user name) as described in CNVD/NVD references. Affec...

CVE-2018-18790

An issue was discovered in zzcms 8.3. SQL Injection exists in admin/specialadd.php via a zxbigclassid cookie. This needs an admin user login...

CVE-2018-18792

An issue was discovered in zzcms 8.3. SQL Injection exists in zs/zslist.php via a pxzs cookie...

CVE-2018-18789

An issue was discovered in zzcms 8.3. SQL Injection exists in zt/top.php via a Host HTTP header to zt/news.php...

CVE-2018-18791

An issue was discovered in zzcms 8.3. SQL Injection exists in zs/search.php via a pxzs cookie...

zzcms SQL Injection Vulnerability (CNVD-2018-26015)

ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A SQL injection vulnerability exists in the admin/classmanage.php file in ZZCMS version 8.3. A remote attacker can exploit this vulnerability to obtain the current user name of mysql with the help of the...

zzcms SQL Injection Vulnerability (CNVD-2018-26018)

ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A SQL injection vulnerability exists in the zs/search.php file in ZZCMS version 8.3. A remote attacker can exploit this vulnerability to obtain the current database name of mysql with the help of pxzs cookie...

zzcms SQL Injection Vulnerability (CNVD-2018-26020)

ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A SQL injection vulnerability exists in the admin/tagmanage.php file in ZZCMS version 8.3. A remote attacker can exploit this vulnerability to obtain the current user name of mysql with the help of the...

zzcms SQL Injection Vulnerability (CNVD-2018-26019)

ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A SQL injection vulnerability exists in the zs/zslist.php file in ZZCMS version 8.3. A remote attacker can exploit this vulnerability to obtain the current user name of mysql with the help of pxzs cookie...

zzcms SQL Injection Vulnerability (CNVD-2018-26021)

ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A SQL injection vulnerability exists in the zs/subzs.php file in ZZCMS version 8.3. A remote attacker can exploit this vulnerability to obtain the current user name of mysql with the help of zzcmscpid cookie...

zzcms SQL Injection Vulnerability (CNVD-2018-26016)

ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A SQL injection vulnerability exists in the zt/top.php file in ZZCMS version 8.3. A remote attacker can exploit this vulnerability to obtain the current user name of mysql...

Arbitrary file deletion vulnerability in ZZCMS 2018 version frontend (CNVD-2018-23353)

ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. An arbitrary file deletion vulnerability exists in the frontend of ZZCMS 2018 version. An attacker can exploit the vulnerability to delete arbitrary files...

Arbitrary File Deletion Vulnerability in ZZCMS 2018 Version Frontend

ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. An arbitrary file deletion vulnerability exists in the frontend of ZZCMS 2018 version. An attacker can exploit the vulnerability to delete arbitrary files...