CVE-2025-15374

A vulnerability was detected in EyouCMS up to 1.7.7. The affected element is an unknown function of the file application/home/model/Ask.php of the component Ask Module. Performing a manipulation of the argument content results in cross site scripting. The attack can be initiated remotely. The...

EyouCMS 跨站脚本漏洞

EyouCMS is an open source content management system CMS based on ThinkPHP by China Eyou Eyou Company. A cross-site scripting vulnerability exists in EyouCMS 1.7.7 and earlier versions, which stems from incorrect manipulation of the parameter content in the file application/home/model/Ask.php, whi...

CVE-2025-15374: Improper Neutralization of Input During Web Page Generation

A vulnerability was detected in EyouCMS up to 1.7.7. The affected element is an unknown function of the file application/home/model/Ask.php of the component Ask Module. Performing a manipulation of the argument content results in cross site scripting. The attack can be initiated remotely. The...

PT-2025-54272

A vulnerability was detected in EyouCMS up to 1.7.7. The affected element is an unknown function of the file application/home/model/Ask.php of the component Ask Module. Performing manipulation of the argument content results in cross site scripting. The attack can be initiated remotely. The explo...

CVE-2021-42945

A SQL Injection vulnerability exists in ZZCMS 2021 via the askbigclassid parameter in /admin/ask.php...

ZZCMS SQL Injection Vulnerability (CNVD-2021-101691)

ZZCMS is a content management system CMS from the Zzcms team in China.ZZCMS is vulnerable to SQL injection in 2021, which stems from a lack of validation of external input SQL statements in the askbigclassid parameter of /admin/ask.php in the application. An attacker could use this vulnerability ...

CVE-2021-42945

A SQL Injection vulnerability exists in ZZCMS 2021 via the askbigclassid parameter in /admin/ask.php...

CVE-2021-42945

A SQL Injection vulnerability exists in ZZCMS 2021 via the askbigclassid parameter in /admin/ask.php...

Sql injection

A SQL Injection vulnerability exists in ZZCMS 2021 via the askbigclassid parameter in /admin/ask.php...

CVE-2021-42945

A SQL Injection vulnerability exists in ZZCMS 2021 via the askbigclassid parameter in /admin/ask.php...

CVE-2021-42945: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability exists in ZZCMS 2021 via the askbigclassid parameter in /admin/ask.php...

PT-2021-7426

Name of the Vulnerable Software and Affected Versions ZZCMS 2021 Description A SQL Injection issue exists due to inadequate protection of the SQL query structure when handling the askbigclassid parameter. This allows a remote attacker to execute arbitrary SQL queries via the /admin/ask.php API...

CVE-2019-9078

zzcms 2019 has XSS via an arbitrary user/ask.php?do=modify parameter because inc/stopsqlin.php does not block a mixed-case string such as sCrIpT...

PT-2019-19351

Name of the Vulnerable Software and Affected Versions zzcms version 2019 Description The issue concerns a security problem where an attacker can execute arbitrary code. This is possible due to the lack of proper input validation in the ask.php file when the do parameter is set to modify...

CVE-2019-9078: Improper Neutralization of Input During Web Page Generation

zzcms 2019 has XSS via an arbitrary user/ask.php?do=modify parameter because inc/stopsqlin.php does not block a mixed-case string such as sCrIpT...