CVE-2019-1010149

zzcms version 8.3 and earlier is affected by: File Delete to Code Execution. The impact is: zzcms File Delete to Code Execution. The component is: user/licencesave.php...

CVE-2019-1010148

zzcms version 8.3 and earlier is affected by: SQL Injection. The impact is: zzcms File Delete to Code Execution...

CVE-2019-1010148

ZZCMS v8.3 and earlier are vulnerable to SQL Injection due to lack of validation of externally entered SQL statements (CNVD/NVD RH/CVE references). The impact described across sources is that this leads from SQL injection to the ability to delete files and achieve code execution in zzcms. Details...

CVE-2019-1010152: Missing Authorization

zzcms 8.3 and earlier is affected by: File Delete to Code Execution. The impact is: getshell. The component is: user/manage.php line 31-80...

CVE-2019-1010148: Improper Neutralization of Special Elements used in an SQL Command

zzcms version 8.3 and earlier is affected by: SQL Injection. The impact is: zzcms File Delete to Code Execution...

CVE-2019-1010149: Missing Authorization

zzcms version 8.3 and earlier is affected by: File Delete to Code Execution. The impact is: zzcms File Delete to Code Execution. The component is: user/licencesave.php...

CVE-2019-1010153: Improper Neutralization of Special Elements used in an SQL Command

zzcms 8.3 and earlier is affected by: SQL Injection. The impact is: sql inject. The component is: zs/subzs.php...

PT-2019-11481

Name of the Vulnerable Software and Affected Versions: zzcms versions 8.3 and earlier Description: The issue affects the /user/zssave.php component, allowing for file deletion to code execution, which can lead to getshell impact. Recommendations: For zzcms versions 8.3 and earlier, at the moment,...

CVE-2019-1010150: Missing Authorization

zzcms 8.3 and earlier is affected by: File Delete to Code Execution. The impact is: getshell. The component is: /user/zssave.php...

PT-2019-11484

Name of the Vulnerable Software and Affected Versions: zzcms versions 8.3 and earlier Description: The issue affects the zs/subzs.php component and is related to SQL Injection, which can lead to sql inject impact. Recommendations: For zzcms versions 8.3 and earlier, at the moment, there is no...

PT-2019-11480

Name of the Vulnerable Software and Affected Versions: zzcms versions 8.3 and earlier Description: The issue concerns a File Delete to Code Execution problem. It affects the user/licence save.php component. Recommendations: For zzcms versions 8.3 and earlier, update to a version later than 8.3 to...

PT-2019-11483

Name of the Vulnerable Software and Affected Versions: zzcms versions 8.3 and earlier Description: The issue affects the user/manage.php component, specifically lines 31-80, and can lead to code execution through file deletion, resulting in a potential getshell impact. Recommendations: For zzcms...

PT-2019-11479

Name of the Vulnerable Software and Affected Versions: zzcms versions 8.3 and earlier Description: The issue affects zzcms, allowing for SQL Injection, which can lead to zzcms file deletion and potentially code execution. Recommendations: For zzcms versions 8.3 and earlier, at the moment, there i...

CVE-2019-1010151

zzcms zzmcms 8.3 and earlier is affected by: File Delete to getshell. The impact is: getshell. The component is: /user/ppsave.php...

CVE-2019-1010151

zzcms zzmcms 8.3 and earlier is affected by: File Delete to getshell. The impact is: getshell. The component is: /user/ppsave.php...

CVE-2019-1010151

CVE-2019-1010151 affects zzcms zzmcms ≤ 8.3. The vulnerability is in the /user/ppsave.php component, described as “File Delete to getshell,” with the impact being getshell. NVD lists CVSS v3.0 base score 9.8 (CRITICAL) and CVSS v2.0 base score 7.5 (HIGH); attack vector is network, no authenticati...

PT-2019-11482

Name of the Vulnerable Software and Affected Versions: zzcms versions 8.3 and earlier Description: The issue affects the /user/ppsave.php component, allowing File Delete to getshell, which can lead to getshell. Recommendations: For zzcms versions 8.3 and earlier, consider restricting access to th...

CVE-2019-1010151: Improper Limitation of a Pathname to a Restricted Directory

zzcms zzmcms 8.3 and earlier is affected by: File Delete to getshell. The impact is: getshell. The component is: /user/ppsave.php...

ZZCMS has an xss vulnerability

ZZCMS is a content management system CMS by the ZZCMS team in China. An xss vulnerability exists in ZZCMS, which can be exploited by an attacker to obtain an administrator cookie...

ZZCMS suffers from SQL injection vulnerability

ZZCMS is a content management system CMS by the ZZCMS team in China. ZZCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...