1163 matches found
PT-2021-22852
Name of the Vulnerable Software and Affected Versions zzcms versions 8.2 through 8.3, 2020, 2021 Description An SQL Injection issue exists in the dl/dl print.php file when registering ordinary users. This allows for potential exploitation during the user registration process. Recommendations For...
CVE-2021-40281: Improper Neutralization of Special Elements used in an SQL Command
An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, and 2021 in dl/dlprint.php when registering ordinary users...
ZZCMS SQL注入漏洞
ZZCMS is a content management system CMS from the Zzcms team in China. ZZCMS is vulnerable to SQL injection, which stems from a missing validation of externally entered SQL statements in the id parameter of admin/dlsendmail.php. An attacker could use this vulnerability to execute illegal SQL...
PT-2021-22850
Name of the Vulnerable Software and Affected Versions zzcms versions 8.2 through 8.3 zzcms version 2020 zzcms version 2021 Description An SQL Injection issue exists via the id parameter in the "admin/bad.php" endpoint. This allows for potential exploitation. Recommendations For zzcms versions 8.2...
ZZCMS SQL注入漏洞
ZZCMS is a content management system CMS from the Zzcms team in China. A SQL injection vulnerability exists in ZZCMS, which stems from a lack of validation of externally entered SQL statements when registering regular users in dl/dldownload.php. An attacker could use this vulnerability to execute...
PT-2021-22851
Name of the Vulnerable Software and Affected Versions zzcms versions 8.2 through 8.3, 2020, 2021 Description The issue is related to an SQL Injection problem. It occurs via the id parameter in the "admin/dl sendmail.php" endpoint. Recommendations For versions 8.2, 8.3, 2020, and 2021, consider...
ZZCMS SQL注入漏洞
ZZCMS is a content management system CMS from the Zzcms team in China. zzcms is vulnerable to SQL injection, which allows an attacker to use the id parameter in admin/bad.php with a lack of validation for external input SQL statements. An attacker can use the vulnerability to execute illegal SQL...
CVE-2021-40279: Improper Neutralization of Special Elements used in an SQL Command
An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, and 2021 via the id parameter in admin/bad.php...
PT-2021-23922
Name of the Vulnerable Software and Affected Versions: zzcms versions less than or equal to 2019 Description: An issue exists due to incorrect access control in zzcms, allowing direct access to the administrator console via "admin.php" after disabling JavaScript. Recommendations: For zzcms versio...
CVE-2021-43703: Undefined Security Weakness
An Incorrect Access Control vulnerability exists in zzcms less than or equal to 2019 via admin.php. After disabling JavaScript, you can directly access the administrator console...
ZZCMS SQL注入漏洞
ZZCMS is a content management system CMS by China Zzcms team. A security vulnerability exists in ZZCMS 8.2, 8.3, 2020, 2021, which originates from a SQL injection when registering a regular user in dl/dlprint.php...
ZZCMS subzs.php component SQL injection vulnerability
ZZCMS is a content management system CMS from the Zzcms team in China.ZZCMS version 2019 is vulnerable to SQL injection, which stems from the lack of effective filtering and escaping of SQL statements in the subzs.php component. An attacker could use this vulnerability to execute illegal SQL...
ZZCMS SQL Injection Vulnerability (CNVD-2021-102063)
ZZCMS is a content management system CMS from the Zzcms team in China. ZZCMS version 2019 is vulnerable to SQL injection, which stems from the software's lack of effective filtering and escaping of SQL statements. An attacker retrieves sensitive data via the dlid parameter in the cookie on the...
ZZCMS SQL Injection Vulnerability (CNVD-2021-103656)
ZZCMS is a content management system CMS from the Zzcms team in China.ZZCMS version 2019 is vulnerable to a SQL injection vulnerability that originates from a missing validation of external input SQL statements in the dlid parameter on the application's /dl/dlprint.php page. An attacker could use...
ZZCMS SQL Injection Vulnerability (CNVD-2021-102064)
ZZCMS is a content management system CMS from the Zzcms team in China.ZZCMS version 2019 is vulnerable to a SQL injection vulnerability that originates from a missing validation of externally entered SQL statements in the id parameter on the application's /dl/dlprint.php page. An attacker could u...
ZZCMS SQL注入漏洞
ZZCMS is a content management system CMS from the Zzcms team in China.ZZCMS version 2019 is vulnerable to SQL injection, which stems from the lack of effective filtering and escaping of SQL statements in the subzs.php component. An attacker could use this vulnerability to execute illegal SQL...
ZZCMS SQL注入漏洞
ZZCMS is a content management system CMS from the Zzcms team in China.ZZCMS version 2019 is vulnerable to a SQL injection vulnerability that originates from a missing validation of externally entered SQL statements in the id parameter on the application's /dl/dlprint.php page. An attacker could u...
ZZCMS SQL注入漏洞
ZZCMS is a content management system CMS from the Zzcms team in China. ZZCMS version 2019 is vulnerable to SQL injection, which stems from the software's lack of effective filtering and escaping of SQL statements. An attacker retrieves sensitive data via the dlid parameter in the cookie on the...
ZZCMS SQL注入漏洞
ZZCMS is a content management system CMS from the Zzcms team in China.ZZCMS version 2019 is vulnerable to a SQL injection vulnerability that originates from a missing validation of external input SQL statements in the dlid parameter on the application's /dl/dlprint.php page. An attacker could use...
