ZZCMS SQL注入漏洞

ZZCMS is a content management system CMS from the Zzcms team in China. zzcms 2019 suffers from a SQL injection vulnerability. The vulnerability originates from user/ztconfig.php SQL injection via the dohang or img POST parameter. No detailed vulnerability details are currently available...

Logic Flaw Vulnerability in ZZCMS Backend

ZZCMS is a completely open source based on PHP, ASP's product investment website management system , project investment website management system , enterprise website management system . ZZCMS back-end logic flaws vulnerabilities. Attackers can use the vulnerability to perform unauthorized...

Code Execution Vulnerability in ZZCMS asp Version

ZZCMS is a completely open source based on PHP, ASP's product investment website management system , project investment website management system , enterprise website management system . ZZCMS asp version of the existence of code execution vulnerabilities , attackers can use the vulnerability to...

ZZCMS Password Reset Vulnerability

ZZCMS is a content management system CMS by Zzcms team in China. A password reset vulnerability exists in zzcms version 201910. The vulnerability stems from The vulnerability stems from an improperly designed or implemented code development process for a web-based system or product. An attacker c...

CVE-2020-21342

Insecure permissions issue in zzcms 201910 via the reset any user password in /one/getpassword.php...

CVE-2020-21342

Insecure permissions issue in zzcms 201910 via the reset any user password in /one/getpassword.php...

Default credentials

Insecure permissions issue in zzcms 201910 via the reset any user password in /one/getpassword.php...

CVE-2020-21342

Insecure permissions issue in zzcms 201910 via the reset any user password in /one/getpassword.php...

CVE-2020-21342

CVE-2020-21342 affects the zzcms web application (version 201910). The issue is an insecure permissions weakness in the password reset flow, specifically via /one/getpassword.php, allowing an attacker to reset any user password. Root cause described as improperly designed or implemented code for ...

ZZCMS 安全漏洞

ZZCMS is a content management system CMS by Zzcms team in China. A password reset vulnerability exists in zzcms version 201910. The vulnerability stems from The vulnerability stems from an improperly designed or implemented code development process for a web-based system or product. An attacker c...

zzcms elevation of privilege vulnerability

ZZCMS is the content management system of Webmaster Merchants. An elevation of privilege vulnerability exists in /user/adv.php in zzcms version 201910. An attacker can exploit this vulnerability to modify data, which can be used to launch further attacks...

CVE-2020-23426

zzcms 201910 contains an access control vulnerability through escalation of privileges in /user/adv.php, which allows an attacker to modify data for further attacks such as CSRF...

CVE-2020-23426

zzcms 201910 contains an access control vulnerability through escalation of privileges in /user/adv.php, which allows an attacker to modify data for further attacks such as CSRF...

Improper access control

zzcms 201910 contains an access control vulnerability through escalation of privileges in /user/adv.php, which allows an attacker to modify data for further attacks such as CSRF...

CVE-2020-23426

CVE-2020-23426 affects zzcms 201910, with an elevation of privilege in /user/adv.php that allows an attacker to modify data. Root cause is an access-control weakness enabling unauthorized data modification, enabling further attacks such as CSRF. Affected product/version: zzcms 201910; vulnerabili...

CVE-2020-23426

zzcms 201910 contains an access control vulnerability through escalation of privileges in /user/adv.php, which allows an attacker to modify data for further attacks such as CSRF...

ZZCMS 访问控制错误漏洞

ZZCMS is the content management system of Webmaster Merchants. An elevation of privilege vulnerability exists in /user/adv.php in zzcms version 201910. An attacker can exploit this vulnerability to modify data, which can be used to launch further attacks...

Logic flaw vulnerability in ZZCMS (CNVD-2021-24717)

ZZCMS is a completely open source based on PHP, ASP's product investment website management system , project investment website management system , enterprise website management system . ZZCMS has a logic flaw vulnerability. Attackers can use this vulnerability to delete any data in the database...

Command Execution Vulnerability in zzzcms V1.5.1

zzcms is a free open source website building system, mainly facing the majority of webmasters to use, do not need authorization, can be free of charge commercially. zzzcms V1.5.1 sa.php file in the command execution vulnerability, an attacker can use the vulnerability to obtain server control...

SQL Injection Vulnerability in zzcms 2020 (CNVD-2021-17363)

zzcms is a content management system. A SQL injection vulnerability exists in zzcms 2020, which can be exploited by attackers to obtain sensitive information from the database...