118 matches found
CVE-2020-18717
The CVE-2020-18717 entry concerns ZZZCMS zzzphp 1.7.1, where a SQL injection due to lack of parameter filtering in inc/zzz_template.php allows remote code execution. Public sources classify the impact as high/critical (NVD CVSS v3.1: 9.8; v2: 7.5). The affected component is the zzz_template.php p...
CVE-2020-18717: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection in ZZZCMS zzzphp 1.7.1 allows remote attackers to execute arbitrary code due to a lack of parameter filtering in inc/zzztemplate.php...
zzzphp Eval Injection Vulnerability
zzphp is an open source free website building system. An Eval injection vulnerability exists in the parserCommom method of the ParserTemplate class in zzzztemplate.php in zzzphp 1.7.2. A remote attacker can exploit this vulnerability to execute arbitrary commands...
CVE-2020-20298
Eval injection vulnerability in the parserCommom method in the ParserTemplate class in zzztemplate.php in zzzphp 1.7.2 allows remote attackers to execute arbitrary commands...
CVE-2020-20298
Eval injection vulnerability in the parserCommom method in the ParserTemplate class in zzztemplate.php in zzzphp 1.7.2 allows remote attackers to execute arbitrary commands...
CVE-2020-20298
CVE-2020-20298 affects zzzphp 1.7.2, specifically the zzz_template.php file within the ParserTemplate class. The vulnerability is described as an eval injection in the parserCommom method, enabling remote attackers to execute arbitrary commands. The connected documents provide this exact descript...
ZZZCMS zzzphp 注入漏洞
zzphp is an open source free website building system. An Eval injection vulnerability exists in the parserCommom method of the ParserTemplate class in zzzztemplate.php in zzzphp 1.7.2. A remote attacker can exploit this vulnerability to execute arbitrary commands...
CVE-2020-20298: Improper Control of Generation of Code
Eval injection vulnerability in the parserCommom method in the ParserTemplate class in zzztemplate.php in zzzphp 1.7.2 allows remote attackers to execute arbitrary commands...
SQL injection vulnerability exists in zzzzphp (CNVD-2020-67552)
zzcms is a free website builder developed in asp language. There is a SQL injection vulnerability in zzzphp, which can be exploited by attackers to obtain sensitive database information...
Logic Flaw Vulnerability in zzzphp V1.7.5
zzphp is a free website builder developed in PHP language. A logic flaw vulnerability exists in zzzphp V1.7.5, which can be exploited by attackers to bypass CAPTCHA validation and gain access to sensitive information on a website...
SQL Injection Vulnerability in zzzphp version 1.7.5
zzphp is a content management system CMS. A SQL injection vulnerability exists in zzzphp version 1.7.5, which can be exploited by attackers to obtain sensitive database information...
SQL Injection Vulnerability in zzzphp 1.7.5
zzphp is a content management system CMS. A SQL injection vulnerability exists in zzzphp 1.7.5, which can be exploited by attackers to obtain sensitive information from the database...
zzzphp v1.7.5 Command Execution Vulnerability in Backend
zzphp is a content management system CMS. A command execution vulnerability exists in the backend of zzzphp v1.7.5, which can be exploited by attackers to execute malicious code...
SQL injection vulnerability in the b*** parameter of the zzzphp sa***.php page
zzphp is a PHP and MYSQL based CMS, free open source building system. zzzphp sa.php page b parameters exist SQL injection vulnerability, an attacker can exploit the vulnerability to obtain database sensitive information...
ZZZphp sa***.php page li*** parameter has SQL injection vulnerability
ZZZphp is a PHP and MYSQL based on free open source website building system . ZZZphp sa.php page li parameter SQL injection vulnerability, an attacker can use the vulnerability to obtain database sensitive information...
SQL injection vulnerability in zzzphp sa***.php page
zzphp is a free website builder developed in PHP language. A SQL injection vulnerability exists in the zzzphp sa.php page, which can be exploited by attackers to obtain sensitive information...
zzzphp V1.7.4 SQL Injection Vulnerability in Backend
zzphp is a free website builder developed in PHP language. zzzphp V1.7.4 suffers from a SQL injection vulnerability in the backend, which can be exploited by attackers to obtain sensitive information...
ZZZCMS zzzphp input validation error vulnerability (CNVD-2020-14279)
ZZZCMS zzzphp is a content management system CMS. An input validation error vulnerability exists in the 'parserIfLabel' function of the inc/zzztemplate.php file in ZZZCMS zzzphp version 1.7.3, which can be exploited by a remote attacker to bypass the 'danger key' function to execute arbitrary cod...