986 matches found
CVE-2019-1010151
CVE-2019-1010151 affects zzcms zzmcms ≤ 8.3. The vulnerability is in the /user/ppsave.php component, described as “File Delete to getshell,” with the impact being getshell. NVD lists CVSS v3.0 base score 9.8 (CRITICAL) and CVSS v2.0 base score 7.5 (HIGH); attack vector is network, no authenticati...
ZZCMS has an xss vulnerability
ZZCMS is a content management system CMS by the ZZCMS team in China. An xss vulnerability exists in ZZCMS, which can be exploited by an attacker to obtain an administrator cookie...
ZZCMS suffers from SQL injection vulnerability
ZZCMS is a content management system CMS by the ZZCMS team in China. ZZCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...
zzcms SQL Injection Vulnerability (CNVD-2019-13262)
ZZCMS is a content management system CMS by the ZZCMS team in China. A SQL injection vulnerability exists in the /user/jobmanage.php file in ZZCMS version 8.3. A remote attacker can exploit this vulnerability to execute SQL commands with the help of the 'bigclass' parameter...
zzcms SQL Injection Vulnerability (CNVD-2019-13263)
ZZCMS is a content management system CMS by the ZZCMS team in China. A SQL injection vulnerability exists in the /user/zselite.php file in ZZCMS version 8.3. A remote attacker can exploit this vulnerability to execute SQL commands with the help of the 'id' parameter...
zzcms SQL Injection Vulnerability (CNVD-2019-13260)
ZZCMS is a content management system CMS by the ZZCMS team in China. A SQL injection vulnerability exists in the /user/logincheck.php file in ZZCMS version 8.3. The vulnerability can be exploited by a remote attacker to execute SQL commands with the help of the 'X-Forwarded' parameter in the HTTP...
Sql injection
zzcms V8.3 has a SQL injection in /user/zselite.php via the id parameter...
CVE-2018-17416
A SQL injection vulnerability exists in zzcms v8.3 via the /admin/adclass.php bigclassid parameter...
CVE-2018-17412
zzcms v8.3 contains a SQL Injection vulnerability in /user/logincheck.php via an X-Forwarded-For HTTP header...
CVE-2018-17416
A SQL injection vulnerability exists in zzcms v8.3 via the /admin/adclass.php bigclassid parameter...
CVE-2018-17413
XSS exists in zzcms v8.3 via the /uploadimgform.php noshuiyin parameter...
Cross site scripting
XSS exists in zzcms v8.3 via the /uploadimgform.php noshuiyin parameter...
CVE-2018-17415
zzcms V8.3 has a SQL injection in /user/zselite.php via the id parameter...
Sql injection
zzcms v8.3 contains a SQL Injection vulnerability in /user/logincheck.php via an X-Forwarded-For HTTP header...
CVE-2018-17413
XSS exists in zzcms v8.3 via the /uploadimgform.php noshuiyin parameter...
Sql injection
zzcms v8.3 has a SQL injection in /user/jobmanage.php via the bigclass parameter...
CVE-2018-17414
zzcms v8.3 has a SQL injection in /user/jobmanage.php via the bigclass parameter...
CVE-2018-17412
zzcms v8.3 contains a SQL Injection vulnerability in /user/logincheck.php via an X-Forwarded-For HTTP header...