1162 matches found
PT-2022-8084
Name of the Vulnerable Software and Affected Versions zzcms version 2019 Description An issue was discovered in zzcms, where there is a SQL injection vulnerability in the /dl/dl sendmail.php endpoint when the attacker has dls print authority. This vulnerability can be exploited via the dlid cooki...
CVE-2019-12353: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin/dlsendmail.php when the attacker has admin authority via the id parameter...
ZZCMS SQL注入漏洞
ZZCMS is a content management system CMS by the ZZCMS team in China. A security vulnerability exists in ZZCMS 2019 version, which can be exploited by an attacker to perform a SQL injection attack via the id parameter in /admin/dlsendmail.php...
CVE-2019-12359: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin/ztliuyansendmail.php when the attacker has admin authority via the id parameter...
PT-2022-8085
Name of the Vulnerable Software and Affected Versions zzcms version 2019 Description An issue was discovered in the software, which allows for SQL injection via the id parameter in the "/admin/dl sendmail.php" API endpoint when an attacker has admin authority. Recommendations For zzcms version...
CVE-2019-12352: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /dl/dlsendmail.php when the attacker has dlsprint authority via a dlid cookie...
CVE-2019-12357: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin/deluser.php when the attacker has admin authority via the id parameter...
ZZCMS SQL注入漏洞
ZZCMS is a content management system CMS by the ZZCMS team in China. A security vulnerability exists in ZZCMS 2019 version, which can be exploited by an attacker to perform a SQL injection attack via the id parameter in /user/dlsprint.php...
ZZCMS SQL注入漏洞
ZZCMS is a content management system CMS by the ZZCMS team in China. A security vulnerability exists in ZZCMS 2019 version, which can be exploited by attackers to perform SQL injection attacks via the id parameter in /admin/deluser.php...
PT-2022-8086
Name of the Vulnerable Software and Affected Versions zzcms version 2019 Description An issue was discovered in zzcms, where there is a SQL injection vulnerability in the /admin/showbad.php endpoint when the attacker has admin authority, via the id parameter. Recommendations For zzcms version 201...
ZZCMS SQL注入漏洞
ZZCMS is a content management system CMS by the ZZCMS team in China. A security vulnerability exists in ZZCMS 2019 version, which can be exploited by an attacker to perform a SQL injection attack via the id parameter in /admin/showbad.php...
PT-2022-8090
Name of the Vulnerable Software and Affected Versions zzcms version 2019 Description An issue was discovered in zzcms, where there is a SQL injection vulnerability in the /dl/dl sendsms.php endpoint when the attacker has dls print authority, via the dlid cookie. Recommendations For zzcms version...
PT-2022-8091
Name of the Vulnerable Software and Affected Versions zzcms version 2019 Description An issue was discovered in zzcms, where there is a SQL injection vulnerability in the "/admin/ztliuyan sendmail.php" endpoint when the attacker has admin authority, via the id parameter. Recommendations For zzcms...
ZZCMS SQL Injection Vulnerability (CNVD-2022-56479)
ZZCMS is a content management system CMS from the ZZCMS team in China. zzCMS version 2019 is vulnerable to SQL injection, which stems from the lack of security filtering of the id parameter in /dl/dlprint.php. No detailed vulnerability details are provided at this time...
ZZCMS SQL Injection Vulnerability (CNVD-2022-56480)
ZZCMS is a content management system CMS from the ZZCMS team in China. zzCMS version 2019 is vulnerable to SQL injection, which stems from the lack of security filtering of the id parameter in /dl/dldownload.php. No detailed vulnerability details are provided at this time...
ZZCMS SQL Injection Vulnerability (CNVD-2022-56481)
ZZCMS is a content management system CMS by the ZZCMS team in China. zzCMS version 2019 is vulnerable to SQL injection, which stems from the lack of single quotes in the id parameter of /admin/dlsendsms.php. No detailed vulnerability details are currently available...
CVE-2019-12349
An issue was discovered in zzcms 2019. SQL Injection exists in /admin/dlsendsms.php via the id parameter...
CVE-2019-12351
An issue was discovered in zzcms 2019. SQL Injection exists in dl/dlprint.php via an id parameter value with a trailing comma...
