26 matches found
CVE-2019-1010149
zzcms version 8.3 and earlier is affected by: File Delete to Code Execution. The impact is: zzcms File Delete to Code Execution. The component is: user/licencesave.php...
CVE-2018-18789
An issue was discovered in zzcms 8.3. SQL Injection exists in zt/top.php via a Host HTTP header to zt/news.php...
Sql injection
zzcms version 8.3 and earlier contains a SQL Injection vulnerability in zt/top.php line 5 that can result in could be attacked by sql injection in zzcms in nginx. This attack appear to be exploitable via running zzcms in nginx...
PT-2018-18988 · Zzcms · Zzcms
Name of the Vulnerable Software and Affected Versions: zzcms version 8.2 Description: An issue was discovered that allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg parameter in the user/adv.php endpoint. This can be leveraged for database access by...
ZZCMS V8.0 SQL Injection Vulnerability in admin/adclass.php File
ZZCMS is an enterprise website building program A SQL injection vulnerability exists in the modifybigclass function of the ZZCMS V8.0 admin/adclass.php file. The vulnerability is caused by the failure to effectively filter parameters, resulting in an injection vulnerability that allows an attacke...
