CVE-2024-11242 ZZCMS Keyword Filtering ad_list.php sql injection

A vulnerability was found in ZZCMS 2023. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/adlist.php?action=pass of the component Keyword Filtering. The manipulation of the argument keyword leads to sql injection. The attack may be launched...

CVE-2024-11242 ZZCMS Keyword Filtering ad_list.php sql injection

A vulnerability was found in ZZCMS 2023. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/adlist.php?action=pass of the component Keyword Filtering. The manipulation of the argument keyword leads to sql injection. The attack may be launched...

CVE-2024-11242

CVE-2024-11242 affects ZZCMS 2023, in the function/endpoint /admin/ad_list.php?action=pass within the Keyword Filtering component. The issue stems from manipulating the keyword parameter, causing an SQL injection. The vulnerability is described as remotely exploitable with public exploit details....

PT-2024-16852 · Zzcms · Zzcms

Name of the Vulnerable Software and Affected Versions: ZZCMS version 2023 Description: A critical issue affects some unknown functionality of the file /admin/ad list.php?action=pass of the component Keyword Filtering. The manipulation of the keyword argument leads to SQL injection. The attack may...

ZZCMS 注入漏洞

ZZCMS is a content management system CMS by the ZZCMS team in China. An injection vulnerability exists in ZZCMS version 2023, which originates from the parameter keyword in the file /admin/adlist.php?action=pass that can cause SQL injection...

CVE-2024-11130

A vulnerability was found in ZZCMS up to 2023. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/msg.php. The manipulation of the argument keyword leads to cross site scripting. The attack may be launched remotely. The exploit has been...

CVE-2024-11130

A vulnerability was found in ZZCMS up to 2023. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/msg.php. The manipulation of the argument keyword leads to cross site scripting. The attack may be launched remotely. The exploit has been...

CVE-2024-11130 ZZCMS msg.php cross site scripting

A vulnerability was found in ZZCMS up to 2023. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/msg.php. The manipulation of the argument keyword leads to cross site scripting. The attack may be launched remotely. The exploit has been...

CVE-2024-11130 ZZCMS msg.php cross site scripting

A vulnerability was found in ZZCMS up to 2023. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/msg.php. The manipulation of the argument keyword leads to cross site scripting. The attack may be launched remotely. The exploit has been...

CVE-2024-11130

CVE-2024-11130 affects ZZCMS up to 2023. The issue is a cross-site scripting (XSS) vulnerability in the unknown-functionality of the file /admin/msg.php caused by manipulation of the keyword parameter. The attack could be launched remotely and the exploit has been disclosed publicly. Public sourc...

PT-2024-16781 · Zzcms · Zzcms

Name of the Vulnerable Software and Affected Versions: ZZCMS versions up to 2023 Description: A vulnerability was found in ZZCMS, affecting some unknown functionality of the file /admin/msg.php. The manipulation of the keyword argument leads to cross-site scripting. The attack may be launched...

ZZCMS 代码注入漏洞

ZZCMS is a content management system CMS from the China ZZCMS team. A code injection vulnerability exists in ZZCMS version 2023 and earlier versions, which stems from an incorrect manipulation of the parameter keyword that can lead to cross-site scripting attacks...

ZZCMS SQL Injection Vulnerability (CNVD-2024-43213)

ZZCMS is a content management system CMS by the ZZCMS team in China. A SQL injection vulnerability exists in ZZCMS version 2023, which originates from the lack of validation of the parameter phome in file 3/Ebak5.1/upload/phome.php for external SQL statements, which can be exploited by an attacke...

CVE-2024-10293

A vulnerability was found in ZZCMS 2023. It has been classified as critical. Affected is the function EbakSetGotoPak of the file 3/Ebbak5.1/upload/class/functions.php. The manipulation of the argument file leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has...

CVE-2024-10291

A vulnerability has been found in ZZCMS 2023 and classified as critical. This vulnerability affects the function EbakDoExecSQL/EbakDotranExecutSQL of the file 3/Ebak5.1/upload/phome.php. The manipulation of the argument phome leads to sql injection. The attack can be initiated remotely. The explo...

CVE-2024-10292

A vulnerability was found in ZZCMS 2023 and classified as critical. This issue affects some unknown processing of the file 3/Ebak5.1/upload/ChangeTable.php. The manipulation of the argument savefilename leads to unrestricted upload. The attack may be initiated remotely. The exploit has been...

CVE-2024-10291

A vulnerability has been found in ZZCMS 2023 and classified as critical. This vulnerability affects the function EbakDoExecSQL/EbakDotranExecutSQL of the file 3/Ebak5.1/upload/phome.php. The manipulation of the argument phome leads to sql injection. The attack can be initiated remotely. The explo...

CVE-2024-10293 ZZCMS functions.php Ebak_SetGotoPak unrestricted upload

A vulnerability was found in ZZCMS 2023. It has been classified as critical. Affected is the function EbakSetGotoPak of the file 3/Ebbak5.1/upload/class/functions.php. The manipulation of the argument file leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has...

CVE-2024-10293 ZZCMS functions.php Ebak_SetGotoPak unrestricted upload

A vulnerability was found in ZZCMS 2023. It has been classified as critical. Affected is the function EbakSetGotoPak of the file 3/Ebbak5.1/upload/class/functions.php. The manipulation of the argument file leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has...

CVE-2024-10293

CVE-2024-10293 affects ZZCMS 2023. The vulnerable component is Ebak_SetGotoPak in 3/Ebbak5.1/upload/class/functions.php. The issue arises from manipulating the file parameter, enabling unrestricted file upload and potentially remote exploitation. Public disclosure of the exploit is indicated in m...