zcms 2.x 后台投稿处 存储型XSS和CSRF漏洞

No description provided by source...

ZCMS(JSP) V1.1 登陆绕过&SQL注入&跨站漏洞

No description provided by source...

ZvingSoft SQL Injection Vulnerability

ZvingSoft ZCMS is a set of enterprise-level web content management system CMS based on J2EE technology and AJAX technology. ZvingSoft ZCMS suffers from a SQL injection vulnerability that could be exploited by remote attackers to submit specially crafted SQL queries to manipulate or obtain databas...

ZvingSoft HTML Injection Vulnerability

ZvingSoft ZCMS is a set of enterprise-level web content management system CMS based on J2EE technology and AJAX technology. ZvingSoft ZCMS suffers from an HTML injection vulnerability, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be...

ZCMS 1.1 - Multiple Vulnerabilities

ZCMS 1.1 - Multiple Vulnerabilities Exploit Title: SQL Injection & Persistent XSS Google Dork: intitle: SQL Injection & Persistent XSS Date: 2015-06-12 Exploit Author: John Page hyp3rlinx Website: hyp3rlinx.altervista.org Vendor Homepage: zencherry.com Software Link:...

ZCMS 1.3 final background verification bypass vulnerability and solution-vulnerability warning-the black bar safety net

Brief description: SSO. jsp The file is a logic error Detailed description: SSO. a jsp file is a logic error % String username = request. getParameter"u"; String time = request. getParameter"t"; String str = request. getParameter"s"; String key = "WIU%&DJAJKL%^WDLJIST"; String s = StringUtil...