CVE-2022-27127

zbzcms v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php/ajax.php...

PT-2022-18234

Name of the Vulnerable Software and Affected Versions zbzcms version 1.0 Description A stored cross-site scripting XSS issue was found in zbzcms. The issue is related to the neirong parameter at the "/php/ajax.php" API endpoint. This allows for potential malicious script execution. Recommendation...

CVE-2022-27127: Improper Neutralization of Special Elements used in an SQL Command

zbzcms v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php/ajax.php...

CVE-2022-27125: Improper Neutralization of Input During Web Page Generation

zbzcms v1.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the neirong parameter at /php/ajax.php...

PT-2022-18236

Name of the Vulnerable Software and Affected Versions zbzcms version 1.0 Description A SQL injection issue was found in zbzcms via the id parameter at the "/php/ajax.php" API endpoint. Recommendations For zbzcms version 1.0, avoid using the id parameter in the "/php/ajax.php" API endpoint until t...