CVE-2021-40279

An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, and 2021 via the id parameter in admin/bad.php...

zzcms SQL Injection Vulnerability (CNVD-2021-99763)

ZZCMS is a content management system CMS from the Zzcms team in China. zzcms is vulnerable to SQL injection, which allows an attacker to use the id parameter in admin/bad.php with a lack of validation for external input SQL statements. An attacker can use the vulnerability to execute illegal SQL...

CVE-2021-40279

An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, and 2021 via the id parameter in admin/bad.php...

CVE-2021-40279

An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, and 2021 via the id parameter in admin/bad.php...

PT-2021-22850

Name of the Vulnerable Software and Affected Versions zzcms versions 8.2 through 8.3 zzcms version 2020 zzcms version 2021 Description An SQL Injection issue exists via the id parameter in the "admin/bad.php" endpoint. This allows for potential exploitation. Recommendations For zzcms versions 8.2...

CVE-2021-40279: Improper Neutralization of Special Elements used in an SQL Command

An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, and 2021 via the id parameter in admin/bad.php...