CVE-2020-19961

A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive data via the component subzs.php...

CVE-2020-19957

A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive data via the id parameter on the /dl/dlprint.php page...

CVE-2020-19960

A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive data via the dlid parameter in the /dl/dlsendsms.php page cookie...

CVE-2020-19957

A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive data via the id parameter on the /dl/dlprint.php page...

CVE-2020-19961

A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive data via the component subzs.php...

Sql injection

A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive data via the dlid parameter in the /dl/dlsendmail.php page cookie...

Sql injection

A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive data via the component subzs.php...

Sql injection

A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive data via the dlid parameter in the /dl/dlsendsms.php page cookie...

Sql injection

A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive data via the id parameter on the /dl/dlprint.php page...

CVE-2020-19957

A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive data via the id parameter on the /dl/dlprint.php page...

CVE-2020-19957

ZZCMS 2019 is affected by a SQL injection vulnerability in the /dl/dl_print.php page, exploitable via the id parameter to retrieve sensitive data. The root cause is missing validation of externally entered SQL statements in ZZCMS, leading to potential data leakage. Affected product/version: ZZCMS...

CVE-2020-19959

CVE-2020-19959 affects ZZCMS 2019. A SQL injection in the /dl/dl_sendmail.php page cookie dlid parameter can allow an attacker to retrieve sensitive data. The issue is documented across multiple sources confirming the vulnerability in ZZCMS 2019 with SQLi via a cookie field; exploitation details ...

CVE-2020-19959

A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive data via the dlid parameter in the /dl/dlsendmail.php page cookie...

CVE-2020-19961

ZZCMS 2019 is vulnerable to a SQL injection via the subzs.php component, affecting ZZCMS versions around 2019. The root cause is lack of proper input filtering/escaping in subzs.php, enabling an attacker to retrieve sensitive database data. Public disclosures come from multiple sources (NVD, Red ...

CVE-2020-19960

CVE-2020-19960 affects ZZCMS (version 2019). The vulnerability is a SQL injection that can exfiltrate sensitive data via the dlid parameter in the application’s PHP pages (e.g., /dl/dl_sendsms.php cookie; CNVD references /dl_print.php). Root cause appears to be insufficient validation/external in...

CVE-2020-19961

A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive data via the component subzs.php...

CVE-2020-19960

A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive data via the dlid parameter in the /dl/dlsendsms.php page cookie...

SQL Injection Vulnerability in ZZCMS Backend ba***.php File

zzcms is a PHP and MYSQL based CMS. A SQL injection vulnerability exists in the ba.php file in the backend of ZZCMS, which can be exploited by attackers to obtain sensitive information from the database...

Unspecified vulnerability in ZZCMS user/manage.php file

ZZCMS is a content management system CMS by the ZZCMS team in China. A security vulnerability exists in the user/manage.php file in ZZCMS 8.3 and earlier versions. An attacker can exploit the vulnerability to execute code...

Reflected Cross-Site Scripting Vulnerability in ZZCMS Version 8.1

ZZCMS is an enterprise website builder. A reflective cross-site scripting vulnerability exists in ZZCMS version 8.1. An attacker can construct an XSS statement and perform a pop-up box operation to obtain user cookies and other information...