Lucene search
+L

986 matches found

ATTACKERKB
ATTACKERKB
added 2022/04/08 11:15 a.m.13 views

CVE-2021-46437

An issue was discovered in ZZCMS 2021. There is a cross-site scripting XSS vulnerability in admanage.php...

4.8CVSS5.3AI score0.00486EPSS
SaveExploits1References2
OSV
OSV
added 2022/04/08 11:15 a.m.6 views

CVE-2021-46437

An issue was discovered in ZZCMS 2021. There is a cross-site scripting XSS vulnerability in admanage.php...

4.8CVSS5.7AI score0.00486EPSS
SaveExploits1References1
NVD
NVD
added 2022/04/08 11:15 a.m.18 views

CVE-2021-46436

An issue was discovered in ZZCMS 2021. There is a SQL injection vulnerability in admanage.php...

7.2CVSS0.00998EPSS
SaveExploits1References1
Prion
Prion
added 2022/04/08 11:15 a.m.16 views

Cross site scripting

An issue was discovered in ZZCMS 2021. There is a cross-site scripting XSS vulnerability in admanage.php...

3.5CVSS4.9AI score0.00486EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2022/04/08 11:15 a.m.21 views

Sql injection

An issue was discovered in ZZCMS 2021. There is a SQL injection vulnerability in admanage.php...

6.8CVSS7.3AI score0.00998EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2022/04/08 10:12 a.m.83 views

CVE-2021-46437

CVE-2021-46437 refers to a cross-site scripting (XSS) vulnerability in ZZCMS 2021, originating from ad_manage.php. The issue stems from lack of proper restriction/filtering of user-supplied parameters, enabling client-side code execution. Multiple connected sources (CNVD-2022-71404, CNVD/EUVD/NVD...

4.8CVSS4.9AI score0.00486EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/04/08 10:12 a.m.23 views

CVE-2021-46437

An issue was discovered in ZZCMS 2021. There is a cross-site scripting XSS vulnerability in admanage.php...

5.2AI score0.00486EPSS
SaveExploits1References1
CVE
CVE
added 2022/04/08 10:6 a.m.90 views

CVE-2021-46436

ZZCMS 2021 contains a SQL injection in ad_manage.php due to insufficient input filtering. Root cause: unsanitized SQL data enables manipulation of queries; impact could include data access/modification. Affected: ZZCMS 2021 (specific versions not disclosed in the provided documents). Remediation/...

7.2CVSS7.2AI score0.00998EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/04/08 10:6 a.m.21 views

CVE-2021-46436

An issue was discovered in ZZCMS 2021. There is a SQL injection vulnerability in admanage.php...

7.5AI score0.00998EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/04/08 12:0 a.m.6 views

ZZCMS SQL注入漏洞

ZZCMS is a content management system CMS from the Zzcms team in China. zzCMS2021 is vulnerable to SQL injection, which stems from a lack of filtering of SQL data in admanage.php. An attacker could use this vulnerability to send malicious SQL commands...

7.2CVSS5.8AI score0.00998EPSS
SaveExploits1References2
CNVD
CNVD
added 2022/04/04 12:0 a.m.12 views

Unauthorized Access Vulnerability in zzcms 2021

zzcms is an enterprise website builder. An unauthorized access vulnerability exists in zzcms 2021, which can be exploited by attackers to obtain sensitive information...

6.8AI score
SaveExploits0
CNVD
CNVD
added 2022/02/16 12:0 a.m.32 views

zzcms authorization problem vulnerability

ZZCMS is a content management system CMS from the Zzcms team in China. zzcms suffers from a security vulnerability that stems from an incorrect access control vulnerability in zzcms 8.2, which could be exploited by attackers to allow malicious users to bypass authentication by changing the userna...

7.5CVSS4AI score0.01166EPSS
SaveExploits1References1
NVD
NVD
added 2022/02/14 7:15 p.m.18 views

CVE-2021-45347

An Incorrect Access Control vulnerability exists in zzcms 8.2, which lets a malicious user bypass authentication by changing the user name in the cookie to use any password...

7.5CVSS0.01166EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2022/02/14 6:35 p.m.21 views

CVE-2021-45347

An Incorrect Access Control vulnerability exists in zzcms 8.2, which lets a malicious user bypass authentication by changing the user name in the cookie to use any password...

7.8AI score0.01166EPSS
SaveExploits1References1
CVE
CVE
added 2022/02/14 6:35 p.m.76 views

CVE-2021-45347

CVE-2021-45347 affects zzcms 8.2. It is an Incorrect Access Control vulnerability allowing an unauthenticated attacker to bypass login by changing the username in the cookie to use any password. The connected sources consistently describe this flaw as an authentication bypass in zzcms 8.2. No spe...

7.5CVSS7.6AI score0.01166EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2022/02/14 12:0 a.m.6 views

zzcms 授权问题漏洞

ZZCMS is a content management system CMS from the Zzcms team in China. zzcms suffers from a security vulnerability that stems from an incorrect access control vulnerability in zzcms 8.2, which could be exploited by attackers to allow malicious users to bypass authentication by changing the userna...

7.5CVSS5.7AI score0.01166EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/02/09 8:15 p.m.3 views

CVE-2021-45286

Directory Traversal vulnerability exists in ZZCMS 2021 via the skin parameter in 1 index.php, 2 bottom.php, and 3 topindex.php...

5.3CVSS5.8AI score0.01656EPSS
SaveExploits1References2
NVD
NVD
added 2022/02/09 8:15 p.m.21 views

CVE-2021-45286

Directory Traversal vulnerability exists in ZZCMS 2021 via the skin parameter in 1 index.php, 2 bottom.php, and 3 topindex.php...

5.3CVSS0.01656EPSS
SaveExploits1References1
OSV
OSV
added 2022/02/09 8:15 p.m.5 views

CVE-2021-45286

Directory Traversal vulnerability exists in ZZCMS 2021 via the skin parameter in 1 index.php, 2 bottom.php, and 3 topindex.php...

5.3CVSS6.1AI score
SaveExploits0References1
Prion
Prion
added 2022/02/09 8:15 p.m.19 views

Directory traversal

Directory Traversal vulnerability exists in ZZCMS 2021 via the skin parameter in 1 index.php, 2 bottom.php, and 3 topindex.php...

5CVSS5.3AI score0.01656EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder