CVE-2024-10290

A vulnerability, which was classified as problematic, was found in ZZCMS 2023. This affects an unknown part of the file 3/qq-connect2.0/API/com/inc.php. The manipulation leads to information disclosure. It is possible to initiate the attack remotely. The exploit has been disclosed to the public a...

CVE-2024-44820

A sensitive information disclosure vulnerability exists in ZZCMS v.2023 and before within the eginfo.php file located at /3/Ebak5.1/upload/. When accessed with the query parameter phome=ShowPHPInfo, the application executes the phpinfo function, which exposes detailed information about the PHP...

Unspecified vulnerability in ZZCMS user/manage.php file

ZZCMS is a content management system CMS by the ZZCMS team in China. A security vulnerability exists in the user/manage.php file in ZZCMS 8.3 and earlier versions. An attacker can exploit the vulnerability to execute code...