Lucene search
+L

3 matches found

CNVD
CNVD
•added 2024/09/09 12:00 a.m.•21 views

ZZCMS caina.php Cross-Site Scripting Vulnerability

ZZCMS is a content management system by the ZZCMS team in China. A cross-site scripting vulnerability exists in ZZCMS caina.php handling HTTPReferer, which can be exploited by a remote attacker to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack us...

5.4CVSS5.7AI score0.00399EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/09/04 12:00 a.m.•15 views

CVE-2024-44818

Cross Site Scripting vulnerability in ZZCMS v.2023 and before allows a remote attacker to obtain sensitive information via the HTTPReferer header of the caina.php component...

6.3AI score0.00399EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/04 12:00 a.m.•2 views

CVE-2024-44818: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in ZZCMS v.2023 and before allows a remote attacker to obtain sensitive information via the HTTPReferer header of the caina.php component...

5.4CVSS6AI score0.00399EPSS
SaveExploits1References1
Rows per page
Query Builder