5 matches found
CVE-2021-42945
A SQL Injection vulnerability exists in ZZCMS 2021 via the askbigclassid parameter in /admin/ask.php...
CVE-2021-42945
A SQL Injection vulnerability exists in ZZCMS 2021 via the askbigclassid parameter in /admin/ask.php...
CVE-2021-42945
A SQL Injection vulnerability exists in ZZCMS 2021 via the askbigclassid parameter in /admin/ask.php...
CVE-2021-42945: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection vulnerability exists in ZZCMS 2021 via the askbigclassid parameter in /admin/ask.php...
PT-2021-7426
Name of the Vulnerable Software and Affected Versions ZZCMS 2021 Description A SQL Injection issue exists due to inadequate protection of the SQL query structure when handling the askbigclassid parameter. This allows a remote attacker to execute arbitrary SQL queries via the /admin/ask.php API...