CVE-2021-40281

CVE-2021-40281 affects ZZCMS. A SQL injection vulnerability exists in zzcms versions 8.2, 8.3, and the 2020/2021 releases in dl/dl_print.php during normal user registration. The connected CNVD/NVD entries confirm the vulnerability with this exact vector, but the provided documents do not include ...

CVE-2021-40281

An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, and 2021 in dl/dlprint.php when registering ordinary users...

CVE-2021-40279

An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, and 2021 via the id parameter in admin/bad.php...

CVE-2021-40280

An SQL Injection vulnerablitly exits in zzcms 8.2, 8.3, 2020, and 2021 via the id parameter in admin/dlsendmail.php...

CVE-2021-40280

An SQL Injection vulnerablitly exits in zzcms 8.2, 8.3, 2020, and 2021 via the id parameter in admin/dlsendmail.php...

CVE-2021-40279

An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, and 2021 via the id parameter in admin/bad.php...

CVE-2021-40280

An SQL Injection vulnerablitly exits in zzcms 8.2, 8.3, 2020, and 2021 via the id parameter in admin/dlsendmail.php...

CVE-2021-40279

An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, and 2021 via the id parameter in admin/bad.php...

Sql injection

An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, and 2021 via the id parameter in admin/bad.php...

Sql injection

An SQL Injection vulnerablitly exits in zzcms 8.2, 8.3, 2020, and 2021 via the id parameter in admin/dlsendmail.php...

CVE-2021-40280

The CVE-2021-40280 entry describes an SQL injection vulnerability in ZZCMS (ZZCMS CMS) exposed via the id parameter in admin/dl_sendmail.php. Affected versions are listed as 8.2, 8.3, 2020, and 2021. The root cause is missing validation of externally supplied SQL statements, enabling an attacker ...

CVE-2021-40280

An SQL Injection vulnerablitly exits in zzcms 8.2, 8.3, 2020, and 2021 via the id parameter in admin/dlsendmail.php...

CVE-2021-40280

An SQL Injection vulnerablitly exits in zzcms 8.2, 8.3, 2020, and 2021 via the id parameter in admin/dlsendmail.php...

CVE-2021-40279

CVE-2021-40279 affects the zz cms (ZZCMS) platform. The vulnerability is an SQL injection in the admin/bad.php file, exploitable via the id parameter. Affected versions include 8.2, 8.3, and the 2020/2021 branches. The root cause is lack of input validation for external input in the SQL statement...

CVE-2021-40279

An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, and 2021 via the id parameter in admin/bad.php...

CVE-2021-40279

An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, and 2021 via the id parameter in admin/bad.php...

CVE-2021-43703: Undefined Security Weakness

An Incorrect Access Control vulnerability exists in zzcms less than or equal to 2019 via admin.php. After disabling JavaScript, you can directly access the administrator console...

CVE-2021-40280: Improper Neutralization of Special Elements used in an SQL Command

An SQL Injection vulnerablitly exits in zzcms 8.2, 8.3, 2020, and 2021 via the id parameter in admin/dlsendmail.php...

CVE-2021-40282: Improper Neutralization of Special Elements used in an SQL Command

An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, abd 2021 in dl/dldownload.php. when registering ordinary users...

ZZCMS 安全漏洞

ZZCMS is a content management system CMS from the Zzcms team in China. ZZCMS suffers from an access control error vulnerability that stems from an incorrect access control vulnerability in zzcms via admin.php, which can be exploited by an attacker to directly access the administrator console afte...