986 matches found
CVE-2018-17136
CVE-2018-17136 affects ZZCMS v8.3, with a SQL Injection in /user/check.php exploitable via the Client-Ip HTTP header. Root cause is improper handling of the header leading to SQL command injection. Exploitation details are not provided beyond the architectural description; CVSS metrics indicate a...
zzcms SQL Injection Vulnerability (CNVD-2018-19742)
ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A SQL injection vulnerability exists in the /user/check.php file in ZZCMS version 8.3. A remote attacker can exploit this vulnerability to execute SQL commands with the help of Client-Ip HTTP packet header...
CVE-2018-16344
An issue was discovered in zzcms 8.3. It allows remote attackers to delete arbitrary files via directory traversal sequences in the flv parameter. This can be leveraged for database access by deleting install.lock...
CVE-2018-16344
An issue was discovered in zzcms 8.3. It allows remote attackers to delete arbitrary files via directory traversal sequences in the flv parameter. This can be leveraged for database access by deleting install.lock...
Directory traversal
An issue was discovered in zzcms 8.3. It allows remote attackers to delete arbitrary files via directory traversal sequences in the flv parameter. This can be leveraged for database access by deleting install.lock...
CVE-2018-16344
CVE-2018-16344 affects the web CMS zzcms 8.3 . The issue allows remote attackers to delete arbitrary files via directory traversal in the flv parameter, which can be leveraged to delete files such as install.lock , potentially enabling database access. The connected documents do not provide explo...
ZZCMS SQL Injection Vulnerability (CNVD-2018-15848)
ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A SQL injection vulnerability exists in line 5 of the zt/top.php file in ZZCMS 8.3 and earlier versions. A remote attacker can exploit this vulnerability by running ZZCMS in nginx to execute arbitrary SQL...
zzcms 8.3 arbitrary file deletion vulnerability deep thinking-vulnerability warning-the black bar safety net
In the analysis of the already existing cve in the process, discovered zzcms 8.3 comparison of the previous version of the function improved, so by the follow-up look, there is no problem, and sure enough found the problem. CMS for file storage implementation Because I myself have done similar cm...
CVE-2018-1000653
zzcms version 8.3 and earlier contains a SQL Injection vulnerability in zt/top.php line 5 that can result in could be attacked by sql injection in zzcms in nginx. This attack appear to be exploitable via running zzcms in nginx...
CVE-2018-1000653
zzcms version 8.3 and earlier contains a SQL Injection vulnerability in zt/top.php line 5 that can result in could be attacked by sql injection in zzcms in nginx. This attack appear to be exploitable via running zzcms in nginx...
Sql injection
zzcms version 8.3 and earlier contains a SQL Injection vulnerability in zt/top.php line 5 that can result in could be attacked by sql injection in zzcms in nginx. This attack appear to be exploitable via running zzcms in nginx...
CVE-2018-1000653
zzcms version 8.3 and earlier contains a SQL Injection vulnerability in zt/top.php line 5 that can result in could be attacked by sql injection in zzcms in nginx. This attack appear to be exploitable via running zzcms in nginx...
CVE-2018-1000653
CVE-2018-1000653 affects ZZCMS 8.3 and earlier. A SQL injection vulnerability exists in the zt/top.php file (line 5). The Red Hat and CNVD/CVE records and related sources indicate the issue can be triggered when ZZCMS is run under nginx, allowing an attacker to influence SQL commands. The public ...
Arbitrary file deletion vulnerability in admin/ad_user_modify.php in zzcms product version 8.3
ZZCMS Product Edition is a CMS Content Management System for quickly building investment-oriented websites. An arbitrary file deletion vulnerability exists in admin/adusermodify.php in ZZCMS Product Edition 8.3. An attacker can exploit the vulnerability to delete arbitrary files...
ZZCMS V8.2 has arbitrary directory deletion vulnerability
ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. ZZCMS V8.2 has an arbitrary directory deletion vulnerability, which can be exploited by attackers to delete arbitrary files...
ZZCMS SQL Injection Vulnerability (CNVD-2018-15398)
ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A SQL injection vulnerability exists in the dl/dlsendmail.php file in ZZCMS version 8.3. A remote attacker can exploit this vulnerability to obtain the administrator password with the help of the 'sql' paramet...
Sql injection
dl/dlsendmail.php in zzcms 8.3 has SQL Injection via the sql parameter...
CVE-2018-14963
zzcms 8.3 has CSRF via the admin/adminadd.php?action=add URI...