1162 matches found
ZZCMS Information Disclosure Vulnerability
ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A security vulnerability exists in ZZCMS version 8.2. A remote attacker can exploit the vulnerability by sending a direct request to the file 3/qqconnect2.0/API/class/ErrorCase.class.php or...
CVE-2018-7434
zzcms 8.2 allows remote attackers to discover the full path via a direct request to 3/qqconnect2.0/API/class/ErrorCase.class.php or 3/ucenterapi/code/friend.php...
Path traversal
zzcms 8.2 allows remote attackers to discover the full path via a direct request to 3/qqconnect2.0/API/class/ErrorCase.class.php or 3/ucenterapi/code/friend.php...
CVE-2018-7434
zzcms 8.2 allows remote attackers to discover the full path via a direct request to 3/qqconnect2.0/API/class/ErrorCase.class.php or 3/ucenterapi/code/friend.php...
CVE-2018-7434
zzcms 8.2 allows remote attackers to discover the full path via a direct request to 3/qqconnect2.0/API/class/ErrorCase.class.php or 3/ucenterapi/code/friend.php...
CVE-2018-7434
The CVE-2018-7434 issue affects ZZCMS 8.2, described as an information-disclosure/path-traversal vulnerability. A remote attacker can discover the full server path by directly requesting 3/qq_connect2.0/API/class/ErrorCase.class.php or 3/ucenter_api/code/friend.php. Affected component: zzcms core...
CVE-2018-7434: Improper Limitation of a Pathname to a Restricted Directory
zzcms 8.2 allows remote attackers to discover the full path via a direct request to 3/qqconnect2.0/API/class/ErrorCase.class.php or 3/ucenterapi/code/friend.php...
PT-2018-18068 · Zzcms · Zzcms
Name of the Vulnerable Software and Affected Versions: zzcms version 8.2 Description: The issue allows remote attackers to discover the full path via a direct request to "3/qq connect2.0/API/class/ErrorCase.class.php" or "3/ucenter api/code/friend.php". Recommendations: For zzcms version 8.2, as ...
zzcms 8.2 任意用户密码修改
zzcms 8.2 任意用户密码修改 漏洞描述 zzcms是一款企业建站程序。 zzcms 8.2版本/one/getpassword.php文件存在漏洞，攻击者可利用该漏洞修改任意用户密码。 漏洞分析 /one/getpassword.php文件第 73行，触发漏洞的关键代码。 elseif$action=="step3" && @$SESSION'username'!='' $passwordtrue = isset$POST'password'?$POST'password':""; $password=md5trim$passwordtrue; query"update...
SQL Injection Vulnerability in zzcms 8.2 user/msg.php File
zzcms is an enterprise website builder program It is an enterprise website builder program. An SQL injection vulnerability exists in the user/msg.php file of zzcms version 8.2, which can be exploited by attackers to access or modify database information...
SQL Injection Vulnerability in zzcms 8.2 user/del.php File
zzcms is an enterprise website builder program It is an enterprise website builder program. zzcms 8.2 version user/del.php file SQL injection vulnerability, attackers can exploit the vulnerability to access or modify the database data...
SQL Injection Vulnerability in zzcms 8.2 user/check.php File
zzcms is an enterprise website builder program It is an enterprise website builder program. An SQL injection vulnerability exists in the user/check.php file of zzcms version 8.2, which can be exploited by attackers to access or modify database data...
zzcms user/askadd.php injection
No description provided by source...
zzcms /user/del. php injection vulnerability
No description provided by source...
Reinstallation Bypass Vulnerability in ZZCMS Version 8.1
ZZCMS is an enterprise website builder. A reinstallation bypass vulnerability exists in ZZCMS version 8.1. The vulnerability is caused by determining whether the lock file is installed at step1, which can be directly submitted by POST to the later steps of the reinstallation, allowing an attacker...
zzcms an arbitrary file deletion vulnerability
No description provided by source...
zzcms arbitrary file deletion vulnerability
No description provided by source...
zzcms a arbitrary file delete
No description provided by source...