3 matches found
CVE-2019-1010148
zzcms version 8.3 and earlier is affected by: SQL Injection. The impact is: zzcms File Delete to Code Execution...
9.8CVSS7.7AI score0.02311EPSS
SaveExploits1References1
CVE-2019-1010148
ZZCMS v8.3 and earlier are vulnerable to SQL Injection due to lack of validation of externally entered SQL statements (CNVD/NVD RH/CVE references). The impact described across sources is that this leads from SQL injection to the ability to delete files and achieve code execution in zzcms. Details...
9.8CVSS9.6AI score0.02311EPSS
SaveExploits1References1Affected Software1
20