CVE-2018-18790

CVE-2018-18790 affects ZZCMS 8.3. An SQL Injection exists in admin/special_add.php exploitable via the zxbigclassid cookie (admin login required). The issue can lead to partial disclosure/integrity/availability impact with high severity per CVSSv3 (HIGH for confidentiality, integrity, availabilit...

CVE-2018-18789

The CVE-2018-18789 entry affects ZZCMS v8.3, where SQL injection exists in zt/top.php via a crafted Host HTTP header to zt/news.php. Connected sources (CNVD-2018-26016) state that this allows a remote attacker to obtain the current MySQL user, aligning with the NVD CVSS vectors (high impact acros...

CVE-2018-18788

CVE-2018-18788 affects ZZCMS v8.3, where SQL injection exists in the admin/classmanage.php file via the unvalidated tablename parameter. The vulnerability requires an admin user login and can allow an attacker to read MySQL data (e.g., current user name) as described in CNVD/NVD references. Affec...

CVE-2018-18787

CVE-2018-18787 concerns zzcms version 8.3, with SQL injection in the zs/zs.php handler triggered via a pxzs cookie. The root cause is improper input handling leading to SQL injection, according to the NVD entry. The available references identify the vulnerability class and affected component, but...

CVE-2018-18792

The CVE-2018-18792 issue affects ZZCMS v8.3, with a SQL Injection in zs/zs_list.php exploitable via the pxzs cookie. The root cause is improper handling of input in that endpoint, enabling an attacker to read data from the MySQL user context. Public references in the connected records confirm the...

CVE-2018-18791

CVE-2018-18791 affects ZZCMS 8.3, where a SQL injection vulnerability exists in zs/search.php via the pxzs cookie. The root cause is improper handling of the cookie data leading to database information exposure. The issue is documented with concrete details across multiple sources (NVD, CNVD) ind...

CVE-2018-18786

CVE-2018-18786 affects ZZCMS 8.3 with a SQL injection in ajax/zs.php exploitable via a pxzs cookie. Root cause: insufficient input validation leading to injection. Impact noted as high/critical across confidentiality, integrity, and availability; CNVD reports attacker can obtain the current MySQL...

CVE-2018-18785

CVE-2018-18785 affects ZZCMS 8.3. An SQL injection exists in zs/subzs.php exploited via a zzcmscpid cookie to zs/search.php. The issue impacts confidentiality, integrity, and availability (per CVSS3: 9.8; network, no user interaction). Publicly provided details describe the vulnerable component a...

CVE-2018-18786

An issue was discovered in zzcms 8.3. SQL Injection exists in ajax/zs.php via a pxzs cookie...

CVE-2018-18784

CVE-2018-18784 affects ZZCMS v8.3. The SQL injection exists in admin/tagmanage.php via the tabletag parameter and requires an admin login. CNVD notes a remote attacker could exploit this to obtain the MySQL current user name. Modes confirm concrete details: affected software (ZZCMS 8.3), vulnerab...

CVE-2018-18790

An issue was discovered in zzcms 8.3. SQL Injection exists in admin/specialadd.php via a zxbigclassid cookie. This needs an admin user login...

zzcms SQL Injection Vulnerability (CNVD-2018-26020)

ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A SQL injection vulnerability exists in the admin/tagmanage.php file in ZZCMS version 8.3. A remote attacker can exploit this vulnerability to obtain the current user name of mysql with the help of the...

zzcms SQL Injection Vulnerability (CNVD-2018-26018)

ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A SQL injection vulnerability exists in the zs/search.php file in ZZCMS version 8.3. A remote attacker can exploit this vulnerability to obtain the current database name of mysql with the help of pxzs cookie...

zzcms SQL Injection Vulnerability (CNVD-2018-26019)

ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A SQL injection vulnerability exists in the zs/zslist.php file in ZZCMS version 8.3. A remote attacker can exploit this vulnerability to obtain the current user name of mysql with the help of pxzs cookie...

zzcms SQL Injection Vulnerability (CNVD-2018-26016)

ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A SQL injection vulnerability exists in the zt/top.php file in ZZCMS version 8.3. A remote attacker can exploit this vulnerability to obtain the current user name of mysql...

zzcms SQL Injection Vulnerability (CNVD-2018-26015)

ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A SQL injection vulnerability exists in the admin/classmanage.php file in ZZCMS version 8.3. A remote attacker can exploit this vulnerability to obtain the current user name of mysql with the help of the...

zzcms SQL Injection Vulnerability (CNVD-2018-26021)

ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A SQL injection vulnerability exists in the zs/subzs.php file in ZZCMS version 8.3. A remote attacker can exploit this vulnerability to obtain the current user name of mysql with the help of zzcmscpid cookie...

Arbitrary File Deletion Vulnerability in ZZCMS 2018 Version Frontend

ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. An arbitrary file deletion vulnerability exists in the frontend of ZZCMS 2018 version. An attacker can exploit the vulnerability to delete arbitrary files...

Arbitrary file deletion vulnerability in ZZCMS 2018 version frontend (CNVD-2018-23353)

ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. An arbitrary file deletion vulnerability exists in the frontend of ZZCMS 2018 version. An attacker can exploit the vulnerability to delete arbitrary files...

SQL Injection Vulnerability in ZZCMS fu***.php Page

ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A SQL injection vulnerability exists in the ZZCMS fu.php page. An attacker can exploit the vulnerability to obtain sensitive information from the database...