CVE-2019-12355

ZZCMS 2019 has a SQL injection vulnerability in /user/dls_print.php via the id parameter when the attacker has dls_print authority. This affects ZZCMS 2019 and could impact confidentiality, integrity, and availability as per CVSS metrics (high/critical-like impact across CIA). The CVE family and ...

CVE-2019-12356

An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /user/dlsdownload.php when the attacker has dlsdownload authority via the id parameter...

CVE-2019-12356

CVE-2019-12356 affects zzcms 2019 and is a SQL injection in /user/dls_download.php via the id parameter when the attacker has dls_download authority. The NVD entry documents a vulnerability class that allows partial/high impacts to confidentiality, integrity, and availability (CVSSv3.1 base score...

CVE-2019-12357

CVE-2019-12357 affects ZZCMS 2019. The Red Hat/EUVD/CNVD/CVE records describe a SQL injection vulnerability in /admin/deluser.php when an attacker has admin authority, exploitable via the id parameter. Publicly available references corroborate the issue as a site‑level SQLi in ZZCMS 2019, with no...

CVE-2019-12357

An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin/deluser.php when the attacker has admin authority via the id parameter...

CVE-2019-12358

Vulnerability context: CVE-2019-12358 affects ZZCMS (2019) with a SQL injection in /dl/dl_sendsms.php, exploit via a dlid cookie when the attacker has dls_print authority. Details supported by connected/docs: The issue is a SQL injection vulnerability in the specified PHP endpoint, triggered thro...

CVE-2019-12358

An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /dl/dlsendsms.php when the attacker has dlsprint authority via a dlid cookie...

CVE-2019-12359

CVE-2019-12359 concerns ZZCMS (2019 version) with a SQL injection vulnerability in the admin module. Specifically, /admin/ztliuyan_sendmail.php is vulnerable via the id parameter when the attacker has admin authority, enabling manipulation of the database (as indicated by the vulnerability descri...

CVE-2019-12359

An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin/ztliuyansendmail.php when the attacker has admin authority via the id parameter...

CVE-2019-12355: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /user/dlsprint.php when the attacker has dlsprint authority via the id parameter...

PT-2022-8087

Name of the Vulnerable Software and Affected Versions zzcms version 2019 Description An issue was discovered in the software, which allows for SQL injection via the id parameter in the "/user/dls print.php" API endpoint when the attacker has dls print authority. Recommendations For zzcms version...

CVE-2019-12354: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin/showbad.php when the attacker has admin authority via the id parameter...

ZZCMS SQL注入漏洞

ZZCMS is a content management system CMS by the ZZCMS team in China. A security vulnerability exists in ZZCMS version 2019, which stems from a SQL injection issue via dlid cookie in /dl/dlsendsms.php. No detailed vulnerability details are currently available...

CVE-2019-12356: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /user/dlsdownload.php when the attacker has dlsdownload authority via the id parameter...

CVE-2019-12358: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /dl/dlsendsms.php when the attacker has dlsprint authority via a dlid cookie...

ZZCMS SQL注入漏洞

ZZCMS is a content management system CMS by the ZZCMS team in China. A security vulnerability exists in ZZCMS 2019 version, which can be exploited by an attacker to perform a SQL injection attack via the id parameter in /admin/ztliuyansendmail.php...

ZZCMS SQL注入漏洞

ZZCMS is a content management system CMS by the ZZCMS team in China. A security vulnerability exists in ZZCMS 2019 version, which can be exploited by an attacker to perform a SQL injection attack via the id parameter in /user/dlsdownload.php...

ZZCMS SQL注入漏洞

zzcms Webmaster Merchants Content Management System, developed by the zzcms team, incorporates database optimization, content caching, AJAX and other technologies to make the site's security, stability, and load capacity is reliably guaranteed. The source code is open and the functional modules a...

PT-2022-8088

Name of the Vulnerable Software and Affected Versions zzcms version 2019 Description An issue was discovered in the software, which is a SQL injection vulnerability. This vulnerability exists in the /user/dls download.php endpoint when the attacker has dls download authority, and it can be...

PT-2022-8089

Name of the Vulnerable Software and Affected Versions zzcms version 2019 Description An issue was discovered in zzcms, where there is a SQL injection vulnerability in the /admin/deluser.php endpoint when the attacker has admin authority, via the id parameter. Recommendations For zzcms version 201...