4 matches found
Sql injection
An issue was discovered in zzcms 8.3. SQL Injection exists in admin/tagmanage.php via the tabletag parameter. This needs an admin user login...
CVE-2018-18784
CVE-2018-18784 affects ZZCMS v8.3. The SQL injection exists in admin/tagmanage.php via the tabletag parameter and requires an admin login. CNVD notes a remote attacker could exploit this to obtain the MySQL current user name. Modes confirm concrete details: affected software (ZZCMS 8.3), vulnerab...
CVE-2018-18784: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in zzcms 8.3. SQL Injection exists in admin/tagmanage.php via the tabletag parameter. This needs an admin user login...
PT-2018-14648
Name of the Vulnerable Software and Affected Versions zzcms version 8.3 Description An issue exists in the software where SQL Injection is possible. This occurs in the admin/tagmanage.php file through the tabletag parameter, and it requires an admin user to be logged in. Recommendations For zzcms...