CVE-2020-20285

ZZCMS 2019 contains a cross-site scripting vulnerability in the user login page. An attacker can inject arbitrary JavaScript via the referer header in user/login.php, as documented by the Nuclei template for CVE-2020-20285. Impact per the connected sources includes potential theft of cookies and ...

ZZCMS 跨站脚本漏洞

ZZCMS is the content management system of Webmaster Merchants. A cross-site scripting vulnerability exists in the user login page of zzcms 2019. An attacker can exploit this vulnerability by injecting js code via user/login.php via the referer header...

ZZCMS suffers from SQL injection vulnerability (CNVD-2020-70597)

ZZCMS is a content management system. A SQL injection vulnerability exists in the frontend of ZZCMS2020, which can be exploited by attackers to obtain sensitive information from the database...

Command Execution Vulnerability in ZZCMS 2020 Frontend

ZZCMS is a content management system. A command execution vulnerability exists in the ZZCMS 2020 frontend, which can be exploited by an attacker to gain control of the server...

Command Execution Vulnerability in ZZCMS (CNVD-2020-69516)

ZZCMS is a content management system. ZZCMS suffers from a command execution vulnerability that can be exploited by an attacker to gain control of the server...

ZZCMS suffers from SQL injection vulnerability (CNVD-2020-66606)

ZZCMS is a content management system for Webmaster Merchants. ZZCMS 2020 suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Stored cross-site scripting vulnerability in ZZCMS to***.php file

ZZCMS is a content management system. A stored cross-site scripting vulnerability exists in the ZZCMS to.php file. An attacker can exploit this vulnerability to obtain user cookie information...

SQL Injection Vulnerability in ZZCMS Backend a***_ma***.php File

ZZCMS is a content management system for Webmaster Merchants. A SQL injection vulnerability exists in the ama.php file in the background of ZZCMS. An attacker can exploit the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in ZZCMS2020 Backend (CNVD-2020-59402)

ZZCMS is a content management system. A SQL injection vulnerability exists in the backend of ZZCMS2020, which can be exploited by attackers to obtain sensitive information from the database...

ZZCMS suffers from a file upload vulnerability (CNVD-2020-59411)

ZZCMS is a content management system. A SQL injection vulnerability exists in the backend of ZZCMS2020, which can be exploited by attackers to gain control of the server...

SQL Injection Vulnerability in ZZCMS2020 Backend (CNVD-2020-59313)

ZZCMS is a content management system. A SQL injection vulnerability exists in the backend of ZZCMS2020, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in ZZCMS2020 Backend (CNVD-2020-59409)

ZZCMS is a content management system. A SQL injection vulnerability exists in the backend of ZZCMS2020, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in ZZCMS2020 Backend (CNVD-2020-59404)

ZZCMS is a content management system. A SQL injection vulnerability exists in the backend of ZZCMS2020, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in ZZCMS2020 Backend (CNVD-2020-59412)

ZZCMS is a content management system. A SQL injection vulnerability exists in the backend of ZZCMS2020, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in ZZCMS2020 Backend (CNVD-2020-59401)

ZZCMS is a content management system. A SQL injection vulnerability exists in the backend of ZZCMS2020, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in ZZCMS Frontend (CNVD-2020-59408)

ZZCMS is a content management system. A SQL injection vulnerability exists in the frontend of ZZCMS2020, which can be exploited by attackers to obtain sensitive information from the database...

Arbitrary File Read Vulnerability in ZZCMS

ZZCMS is a content management system for Webmaster Merchants. ZZCMS has an arbitrary file reading vulnerability, which can be exploited by an attacker to traverse website files to obtain sensitive information...

File upload vulnerability in zzcms framework

zzcms webmaster Merchants content management system, developed by the zzcms team, into the database optimization, content caching, AJAX and other technologies, so that the site's security, stability, load capacity to get a reliable protection. Open source, independent functional modules, to...

Logic Flaw Vulnerability in ZZCMS 2020 Merchandising Management System

ZZCMS is a content management system for Webmaster Merchants. A logic flaw vulnerability exists in the ZZCMS 2020 Merchants Management System, which can be exploited by an attacker to compromise the integrity of the system...

ZZCMS version 2020 is vulnerable to system reinstallation.

ZZCMS is a content management system for Webmaster Merchants. A system reinstallation vulnerability exists in ZZCMS version 2020, which can be exploited by attackers to cause a denial of service...