EUVD-2018-9167

Malware in sbrugna...

zzcms cross-site scripting vulnerability (CNVD-2019-13261)

ZZCMS is a content management system CMS by the ZZCMS team in China. A cross-site scripting vulnerability exists in the /uploadimgform.php file in ZZCMS version 8.3. A remote attacker can exploit this vulnerability to inject arbitrary HTML or web scripts with the help of the 'noshuiyin' parameter...

Cross site scripting

XSS exists in zzcms v8.3 via the /uploadimgform.php noshuiyin parameter...

CVE-2018-17413

XSS exists in zzcms v8.3 via the /uploadimgform.php noshuiyin parameter...

CVE-2018-17413

XSS exists in zzcms v8.3 via the /uploadimgform.php noshuiyin parameter...

CVE-2018-17413

ZZCMS v8.3 is affected by a cross-site scripting (XSS) vulnerability in /uploadimg_form.php via the noshuiyin parameter. Root cause: unsanitized input leading to HTML/JS injection. Documented impact per sources: ability to inject scripts; CVSS3.0 base score 6.1 (MEDIUM) with user interaction requ...