CVE-2019-12355

An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /user/dlsprint.php when the attacker has dlsprint authority via the id parameter...

CVE-2019-12357

An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin/deluser.php when the attacker has admin authority via the id parameter...

CVE-2019-12359

An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin/ztliuyansendmail.php when the attacker has admin authority via the id parameter...

CVE-2019-12352

An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /dl/dlsendmail.php when the attacker has dlsprint authority via a dlid cookie...

Sql injection

An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin/ztliuyansendmail.php when the attacker has admin authority via the id parameter...

Sql injection

An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /dl/dlsendmail.php when the attacker has dlsprint authority via a dlid cookie...

Sql injection

An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin/showbad.php when the attacker has admin authority via the id parameter...

Sql injection

An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin/dlsendmail.php when the attacker has admin authority via the id parameter...

Sql injection

An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /user/dlsprint.php when the attacker has dlsprint authority via the id parameter...

Sql injection

An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /dl/dlsendsms.php when the attacker has dlsprint authority via a dlid cookie...

Sql injection

An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin/deluser.php when the attacker has admin authority via the id parameter...

Sql injection

An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /user/dlsdownload.php when the attacker has dlsdownload authority via the id parameter...

CVE-2019-12353

An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin/dlsendmail.php when the attacker has admin authority via the id parameter...

CVE-2019-12353

The CVE-2019-12353 entry affects ZZCMS 2019. A SQL injection vulnerability exists in /admin/dl_sendmail.php when an attacker has admin authority, exploitable via the id parameter. The Red Hat and CNVD/CNNVD, CVE records corroborate the same description. Impact is described as enabling information...

CVE-2019-12354

An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin/showbad.php when the attacker has admin authority via the id parameter...

CVE-2019-12355

ZZCMS 2019 has a SQL injection vulnerability in /user/dls_print.php via the id parameter when the attacker has dls_print authority. This affects ZZCMS 2019 and could impact confidentiality, integrity, and availability as per CVSS metrics (high/critical-like impact across CIA). The CVE family and ...

CVE-2019-12355

An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /user/dlsprint.php when the attacker has dlsprint authority via the id parameter...

CVE-2019-12357

An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin/deluser.php when the attacker has admin authority via the id parameter...

CVE-2019-12357

CVE-2019-12357 affects ZZCMS 2019. The Red Hat/EUVD/CNVD/CVE records describe a SQL injection vulnerability in /admin/deluser.php when an attacker has admin authority, exploitable via the id parameter. Publicly available references corroborate the issue as a site‑level SQLi in ZZCMS 2019, with no...

CVE-2019-12359

CVE-2019-12359 concerns ZZCMS (2019 version) with a SQL injection vulnerability in the admin module. Specifically, /admin/ztliuyan_sendmail.php is vulnerable via the id parameter when the attacker has admin authority, enabling manipulation of the database (as indicated by the vulnerability descri...