Lucene search
+L

16 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2019-3985

Malware in sbrugna...

9.8CVSS8.1AI score0.01398EPSS
SaveExploits1References2
CNVD
CNVD
•added 2022/06/10 12:00 a.m.•67 views

ZZCMS SQL Injection Vulnerability (CNVD-2022-56480)

ZZCMS is a content management system CMS from the ZZCMS team in China. zzCMS version 2019 is vulnerable to SQL injection, which stems from the lack of security filtering of the id parameter in /dl/dldownload.php. No detailed vulnerability details are provided at this time...

9.8CVSS3.8AI score0.01398EPSS
SaveExploits1References1
OSV
OSV
•added 2022/06/02 2:15 p.m.•14 views

CVE-2019-12350

An issue was discovered in zzcms 2019. SQL Injection exists in dl/dldownload.php via an id parameter value with a trailing comma...

9.8CVSS5.8AI score0.01398EPSS
SaveExploits1References1
NVD
NVD
•added 2022/06/02 2:15 p.m.•32 views

CVE-2019-12350

An issue was discovered in zzcms 2019. SQL Injection exists in dl/dldownload.php via an id parameter value with a trailing comma...

9.8CVSS0.01398EPSS
SaveExploits1References1
Prion
Prion
•added 2022/06/02 2:15 p.m.•29 views

Sql injection

An issue was discovered in zzcms 2019. SQL Injection exists in dl/dldownload.php via an id parameter value with a trailing comma...

7.5CVSS9.8AI score0.01398EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2022/06/02 12:58 p.m.•70 views

CVE-2019-12350

CVE-2019-12350 affects zzCMS (2019) with a SQL Injection in the script /dl/dl_download.php where an id parameter value with a trailing comma is unsafely handled. Root cause: lack of input filtering/validation for the id parameter, enabling injection. Consequences per the entry indicate a high-sev...

9.8CVSS9.8AI score0.01398EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2022/06/02 12:58 p.m.•41 views

CVE-2019-12350

An issue was discovered in zzcms 2019. SQL Injection exists in dl/dldownload.php via an id parameter value with a trailing comma...

9.9AI score0.01398EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/02 12:00 a.m.•7 views

CVE-2019-12350: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in zzcms 2019. SQL Injection exists in dl/dldownload.php via an id parameter value with a trailing comma...

9.8CVSS8.2AI score0.01398EPSS
SaveExploits1References2
CNVD
CNVD
•added 2021/12/12 12:00 a.m.•31 views

ZZCMS SQL Injection Vulnerability (CNVD-2021-103084)

ZZCMS is a content management system CMS from the Zzcms team in China. A SQL injection vulnerability exists in ZZCMS, which stems from a lack of validation of externally entered SQL statements when registering regular users in dl/dldownload.php. An attacker could use this vulnerability to execute...

8.8CVSS4.7AI score0.01149EPSS
SaveExploits1References1
OSV
OSV
•added 2021/12/09 5:15 p.m.•16 views

CVE-2021-40282

An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, abd 2021 in dl/dldownload.php. when registering ordinary users...

8.8CVSS5.8AI score0.01149EPSS
SaveExploits1References1
NVD
NVD
•added 2021/12/09 5:15 p.m.•24 views

CVE-2021-40282

An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, abd 2021 in dl/dldownload.php. when registering ordinary users...

8.8CVSS0.01149EPSS
SaveExploits1References1
Prion
Prion
•added 2021/12/09 5:15 p.m.•28 views

Sql injection

An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, abd 2021 in dl/dldownload.php. when registering ordinary users...

6.5CVSS9.1AI score0.01149EPSS
SaveExploits1References1Affected Software1
Mend
Mend
•added 2021/12/09 4:27 p.m.•1 views

CVE-2021-40282

An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, abd 2021 in dl/dldownload.php. when registering ordinary users...

8.8CVSS0.01149EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2021/12/09 4:27 p.m.•36 views

CVE-2021-40282

An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, abd 2021 in dl/dldownload.php. when registering ordinary users...

9.3AI score0.01149EPSS
SaveExploits1References1
CVE
CVE
•added 2021/12/09 4:27 p.m.•64 views

CVE-2021-40282

CVE-2021-40282 concerns ZZCMS SQL injection in the dl/dl_download.php path during user registration. The connected CNVD/CNNVD/Red Hat/Reddit-style entries confirm the flaw stems from insufficient input validation for externally entered SQL statements, potentially allowing an attacker to execute a...

8.8CVSS9.1AI score0.01149EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/09 12:00 a.m.•4 views

CVE-2021-40282: Improper Neutralization of Special Elements used in an SQL Command

An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, abd 2021 in dl/dldownload.php. when registering ordinary users...

8.8CVSS5.8AI score0.01149EPSS
SaveExploits1References2
Rows per page
Query Builder