EUVD-2018-10502

Malware in sbrugna...

Sql injection

An issue was discovered in zzcms 8.3. SQL Injection exists in ajax/zs.php via a pxzs cookie...

CVE-2018-18786

CVE-2018-18786 affects ZZCMS 8.3 with a SQL injection in ajax/zs.php exploitable via a pxzs cookie. Root cause: insufficient input validation leading to injection. Impact noted as high/critical across confidentiality, integrity, and availability; CNVD reports attacker can obtain the current MySQL...

CVE-2018-18786: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in zzcms 8.3. SQL Injection exists in ajax/zs.php via a pxzs cookie...

CVE-2018-18787: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in zzcms 8.3. SQL Injection exists in zs/zs.php via a pxzs cookie...

PT-2018-14650

Name of the Vulnerable Software and Affected Versions zzcms version 8.3 Description An issue exists in zzcms where SQL Injection is possible. This occurs in the ajax/zs.php file through the pxzs cookie. Recommendations For zzcms version 8.3, consider restricting access to the ajax/zs.php file unt...

PT-2018-14651

Name of the Vulnerable Software and Affected Versions zzcms version 8.3 Description An issue exists in zzcms where SQL Injection is possible. This occurs in the zs/zs.php file via the pxzs cookie. Recommendations For zzcms version 8.3, consider restricting access to the zs/zs.php file or removing...