EUVD-2019-3985

Malware in sbrugna...

ZZCMS SQL Injection Vulnerability (CNVD-2022-56480)

ZZCMS is a content management system CMS from the ZZCMS team in China. zzCMS version 2019 is vulnerable to SQL injection, which stems from the lack of security filtering of the id parameter in /dl/dldownload.php. No detailed vulnerability details are provided at this time...

CVE-2019-12350

An issue was discovered in zzcms 2019. SQL Injection exists in dl/dldownload.php via an id parameter value with a trailing comma...

CVE-2019-12350

An issue was discovered in zzcms 2019. SQL Injection exists in dl/dldownload.php via an id parameter value with a trailing comma...

Sql injection

An issue was discovered in zzcms 2019. SQL Injection exists in dl/dldownload.php via an id parameter value with a trailing comma...

CVE-2019-12350

An issue was discovered in zzcms 2019. SQL Injection exists in dl/dldownload.php via an id parameter value with a trailing comma...

CVE-2019-12350

CVE-2019-12350 affects zzCMS (2019) with a SQL Injection in the script /dl/dl_download.php where an id parameter value with a trailing comma is unsafely handled. Root cause: lack of input filtering/validation for the id parameter, enabling injection. Consequences per the entry indicate a high-sev...

ZZCMS SQL Injection Vulnerability (CNVD-2021-103084)

ZZCMS is a content management system CMS from the Zzcms team in China. A SQL injection vulnerability exists in ZZCMS, which stems from a lack of validation of externally entered SQL statements when registering regular users in dl/dldownload.php. An attacker could use this vulnerability to execute...

CVE-2021-40282

An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, abd 2021 in dl/dldownload.php. when registering ordinary users...

CVE-2021-40282

An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, abd 2021 in dl/dldownload.php. when registering ordinary users...

Sql injection

An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, abd 2021 in dl/dldownload.php. when registering ordinary users...

CVE-2021-40282

An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, abd 2021 in dl/dldownload.php. when registering ordinary users...

CVE-2021-40282

CVE-2021-40282 concerns ZZCMS SQL injection in the dl/dl_download.php path during user registration. The connected CNVD/CNNVD/Red Hat/Reddit-style entries confirm the flaw stems from insufficient input validation for externally entered SQL statements, potentially allowing an attacker to execute a...