CVE-2023-42398

An issue in zzCMS v.2023 allows a remote attacker to execute arbitrary code and obtain sensitive information via the ueditor component in controller.php...

CVE-2023-42398

The CVE-2023-42398 issue affects zzCMS v.2023, where an attacker can remotely execute arbitrary code and disclose sensitive data through the ueditor component in controller.php. The vulnerability is associated with zzCMS 2023 and involves the ueditor integration in controller.php, enabling code e...

CVE-2023-36162

Cross Site Request Forgery vulnerability in ZZCMS v.2023 and earlier allows a remote attacker to gain privileges via the add function in adminlist.php...

CVE-2023-36162

Cross Site Request Forgery vulnerability in ZZCMS v.2023 and earlier allows a remote attacker to gain privileges via the add function in adminlist.php...

CVE-2023-36162

Cross Site Request Forgery vulnerability in ZZCMS v.2023 and earlier allows a remote attacker to gain privileges via the add function in adminlist.php...

Cross site request forgery (csrf)

Cross Site Request Forgery vulnerability in ZZCMS v.2023 and earlier allows a remote attacker to gain privileges via the add function in adminlist.php...

CVE-2023-36162

Cross Site Request Forgery vulnerability in ZZCMS v.2023 and earlier allows a remote attacker to gain privileges via the add function in adminlist.php...

PT-2023-25462 · Zzcms · Zzcms

Name of the Vulnerable Software and Affected Versions: ZZCMS versions 2023 and earlier Description: The issue allows a remote attacker to gain privileges via the add function in adminlist.php. This is a Cross Site Request Forgery vulnerability. Recommendations: For ZZCMS versions 2023 and earlier...

ZZCMS 跨站请求伪造漏洞

ZZCMS is a content management system CMS from the China ZZCMS team. A cross-site request forgery vulnerability exists in ZZCMS v.2023, which originates from a vulnerability that allows remote attackers to gain privileges via the add function in adminlist.php...

CVE-2023-36162

Cross Site Request Forgery vulnerability in ZZCMS v.2023 and earlier allows a remote attacker to gain privileges via the add function in adminlist.php...

CVE-2023-36162: Cross-Site Request Forgery (CSRF)

Cross Site Request Forgery vulnerability in ZZCMS v.2023 and earlier allows a remote attacker to gain privileges via the add function in adminlist.php...

CVE-2023-36162

CVE-2023-36162 concerns ZZCMS versions 2023 and earlier, where a Cross-Site Request Forgery (CSRF) flaw in the add function of adminlist.php enables a remote attacker to escalate privileges. Affected component is ZZCMS, with the root cause described as CSRF leading to privilege gains; CVSS v3.1 m...

CVE-2023-36162

Cross Site Request Forgery vulnerability in ZZCMS v.2023 and earlier allows a remote attacker to gain privileges via the add function in adminlist.php...

The vulnerability in the admin/sendmailto.php script of the ZZCMS CMS system allows a hacker to execute arbitrary SQL code.

The vulnerability in the admin/sendmailto.php script of the ZZCMS CMS system relates to the lack of protection for the SQL query structure when processing the parameter tomail=&groupid=. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code remotely...

CVE-2022-44361

An issue was discovered in ZZCMS 2022. There is a cross-site scripting XSS vulnerability in admin/adlist.php...

CVE-2022-44361

An issue was discovered in ZZCMS 2022. There is a cross-site scripting XSS vulnerability in admin/adlist.php...

Cross site scripting

An issue was discovered in ZZCMS 2022. There is a cross-site scripting XSS vulnerability in admin/adlist.php...

CVE-2022-44361

An issue was discovered in ZZCMS 2022. There is a cross-site scripting XSS vulnerability in admin/adlist.php...

CVE-2022-44361

An issue was discovered in ZZCMS 2022. There is a cross-site scripting XSS vulnerability in admin/adlist.php...

CVE-2022-44361

CVE-2022-44361 affects ZZCMS 2022, fixed in admin/ad_list.php XSS. Root cause: insufficient input sanitization in the admin/ad_list.php component leading to cross-site scripting. CVSSv3.1 base score 5.4 (Network, Low attack complexity, User interaction required, Privileges Low, Confidentiality/In...