986 matches found
CVE-2019-1010152
zzcms 8.3 and earlier is affected by: File Delete to Code Execution. The impact is: getshell. The component is: user/manage.php line 31-80...
CVE-2019-1010152
zzcms 8.3 and earlier is affected by: File Delete to Code Execution. The impact is: getshell. The component is: user/manage.php line 31-80...
CVE-2019-1010153
zzcms 8.3 and earlier is affected by: SQL Injection. The impact is: sql inject. The component is: zs/subzs.php...
Remote code execution
zzcms version 8.3 and earlier is affected by: File Delete to Code Execution. The impact is: zzcms File Delete to Code Execution. The component is: user/licencesave.php...
Sql injection
zzcms 8.3 and earlier is affected by: SQL Injection. The impact is: sql inject. The component is: zs/subzs.php...
Code injection
zzcms 8.3 and earlier is affected by: File Delete to Code Execution. The impact is: getshell. The component is: user/manage.php line 31-80...
Code injection
zzcms 8.3 and earlier is affected by: File Delete to Code Execution. The impact is: getshell. The component is: /user/zssave.php...
Sql injection
zzcms version 8.3 and earlier is affected by: SQL Injection. The impact is: zzcms File Delete to Code Execution...
CVE-2019-1010153
zzcms 8.3 and earlier is affected by: SQL Injection. The impact is: sql inject. The component is: zs/subzs.php...
CVE-2019-1010153
CVE-2019-1010153 affects ZZCMS 8.3 and earlier, with a SQL injection vulnerability in the zs/subzs.php component. The root cause is lack of validation of externally entered SQL statements in database-based applications. The impact is partial to full SQL execution depending on context, as describe...
CVE-2019-1010152
zzcms 8.3 and earlier is affected by: File Delete to Code Execution. The impact is: getshell. The component is: user/manage.php line 31-80...
CVE-2019-1010152
CVE-2019-1010152 affects ZZCMS (version 8.3 and earlier). The vulnerability is in user/manage.php (lines 31–80) and is described as a file-delete-to-code-execution issue, with the impact stated as getshell. Other connected records reinforce the same affected component and impact, without providin...
CVE-2019-1010150
zzcms 8.3 and earlier is affected by: File Delete to Code Execution. The impact is: getshell. The component is: /user/zssave.php...
CVE-2019-1010150
ZZCMS version 8.3 and earlier is affected by a vulnerability in the /user/zssave.php component that allows Code Execution via File Delete, effectively enabling an attacker to obtain a shell (getshell). This CVE (CVE-2019-1010150) is documented with risk details indicating network-based access and...
CVE-2019-1010149
zzcms version 8.3 and earlier is affected by: File Delete to Code Execution. The impact is: zzcms File Delete to Code Execution. The component is: user/licencesave.php...
CVE-2019-1010149
The CVE-2019-1010149 entry affects ZZCMS, specifically versions 8.3 and earlier, due to a vulnerability in the user/licence_save.php component that can lead to File Delete to Code Execution. Impact is described as code execution within ZZCMS. Documents do not provide exploitation details, affecte...
CVE-2019-1010148
ZZCMS v8.3 and earlier are vulnerable to SQL Injection due to lack of validation of externally entered SQL statements (CNVD/NVD RH/CVE references). The impact described across sources is that this leads from SQL injection to the ability to delete files and achieve code execution in zzcms. Details...
CVE-2019-1010148
zzcms version 8.3 and earlier is affected by: SQL Injection. The impact is: zzcms File Delete to Code Execution...