zzcms special/search.php SQL injection vulnerability

No description provided by source...

zzcms dl/dladd.php SQL injection

No description provided by source...

zzcms user/logincheck.php SQL injection vulnerability

inc/function.php 72 line php function getip if getenv"HTTPCLIENTIP" && strcasecmpgetenv"HTTPCLIENTIP", "unknown" $ip = getenv"HTTPCLIENTIP"; else if getenv"HTTPXFORWARDEDFOR" && strcasecmpgetenv"HTTPXFORWARDEDFOR", "unknown" $ip = getenv"HTTPXFORWARDEDFOR"; else if getenv"REMOTEADDR" &&...

zzcms admin/logincheck.php SQL injection vulnerability

inc/function.php 72 line php function getip if getenv"HTTPCLIENTIP" && strcasecmpgetenv"HTTPCLIENTIP", "unknown" $ip = getenv"HTTPCLIENTIP"; else if getenv"HTTPXFORWARDEDFOR" && strcasecmpgetenv"HTTPXFORWARDEDFOR", "unknown" $ip = getenv"HTTPXFORWARDEDFOR"; else if getenv"REMOTEADDR" &&...

SQL Injection Vulnerability in zzcms 'zx.php'

ZZCMS is an enterprise website builder. A SQL injection vulnerability exists in zzcms 'zx.php'. It allows attackers to exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in ZZCMS 'subzs.php'

ZZCMS is an enterprise website builder. A SQL injection vulnerability exists in ZZCMS 'subzs.php'. It allows attackers to exploit the vulnerability to obtain sensitive information about the database...

SQL Injection Vulnerability in Zzcms admin/logincheck.php Page

ZZCMS is an enterprise website builder. A SQL injection vulnerability exists in the zzcms admin/logincheck.php page. Due to the failure to filter variables coming from $SERVER, an attacker can exploit the vulnerability to obtain sensitive database data...

Zzcms V7.2 Arbitrary File Deletion Vulnerability

ZZCMS is an enterprise website builder. An arbitrary file deletion vulnerability exists in the '/user/delimg.php' page of Zzcms V7.2. An attacker is allowed to exploit the vulnerability to delete arbitrary files, or can cause a reinstallation...

Multiple SQL Injection Vulnerabilities in ZZCMS 7.2

ZZCMS is an enterprise website builder. A SQL injection vulnerability exists in the username parameter on the /reg/userregcheckemail.php page, the bigclass parameter on the zt/zs.php page, and the pagesize parameter on the /zh/zh.php page. An attacker can exploit the vulnerabilities to obtain...

Multiple XSS Vulnerabilities in ZZCMS 7.2

ZZCMS is an enterprise website builder. ZZCMS 7.2 suffers from an XSS vulnerability in the /inc/top.php page and the Uploadimgform.php page. An attacker can exploit the vulnerability to inject arbitrary Web script or HTML...

Arbitrary File Read Vulnerability in zzcms 7.2 Version

ZZCMS highlights the investment and supply and demand functions, you can quickly build a product investment website. ZZCMS v7.1 has an arbitrary file read vulnerability that can be exploited by an attacker to access restricted directories and execute commands outside the root directory of the web...

Reinstallation vulnerability in zzcms version 7.2

ZZCMS highlights the investment and supply and demand functions, you can quickly build a product investment website. ZZCMS system v7.1 has a reinstallation vulnerability that allows an attacker to exploit the vulnerability by visiting /install/index.php, submitting: POST request: submit=1&step=4,...

SQL Injection Vulnerability in zzcms Latest Product Version /pp/search.php Page

ZZCMS highlights the investment and supply and demand functions, you can quickly build a product investment website. The latest product version of zzcms /pp/search.php page SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive database data...

zzcms user/check.php has arbitrary user password change vulnerability

ZZCMS highlights the investment and supply and demand functions, you can quickly build a product investment website. zzcms latest product version of any user password change vulnerability, the vulnerability trigger point in /user/check.php, the attacker can take advantage of the vulnerability to...

SQL Injection Vulnerability in zzcms Latest Product Version /zx/search.php Page

ZZCMS highlights the investment and supply and demand functions, you can quickly build a product investment website. A SQL injection vulnerability exists in the /zx/search.php page of the latest product version of zzcms. Attackers can use the vulnerability to obtain sensitive database data...

SQL Injection Vulnerability in zzcms Latest Product Version /zs/search.php Page

ZZCMS highlights the investment and supply and demand functions, you can quickly build a product investment website. zzcms latest product version /zs/search.php page SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive database data...

SQL Injection Vulnerability in zzcms /dl/show.php

ZZCMS highlights the investment and supply and demand functions, you can quickly build a product investment website. The latest product version of zzcms has SQL injection vulnerability, the vulnerability trigger point in /dl/show.php, the attacker can use the vulnerability to obtain sensitive...

SQL injection vulnerability in ZZCMS system searchform.php file

ZZCMS is an enterprise website builder. ZZCMS System v7.1 suffers from a SQL injection vulnerability. The searchform.php file in the /company/ directory fails to correctly process $COOKIE'companyb' data, allowing remote attackers to exploit the vulnerability by submitting a specially crafted SQL...

SQL Injection Vulnerability in zzcms inc/stopsqlin.php

ZZCMS highlights the investment and supply and demand functions, you can quickly build a product investment website. SQL injection vulnerability exists in zzcms product/project version, the trigger point of the vulnerability is in inc/stopsqlin.php, the attacker can use the vulnerability to obtai...

zzcms产品版 \dl\search.php 参数b SQL注入

No description provided by source...