CVE-2019-12350

An issue was discovered in zzcms 2019. SQL Injection exists in dl/dldownload.php via an id parameter value with a trailing comma...

CVE-2019-12351

An issue was discovered in zzcms 2019. SQL Injection exists in dl/dlprint.php via an id parameter value with a trailing comma...

Sql injection

An issue was discovered in zzcms 2019. SQL Injection exists in dl/dldownload.php via an id parameter value with a trailing comma...

Sql injection

An issue was discovered in zzcms 2019. SQL Injection exists in dl/dlprint.php via an id parameter value with a trailing comma...

Sql injection

An issue was discovered in zzcms 2019. SQL Injection exists in /admin/dlsendsms.php via the id parameter...

CVE-2019-12350

An issue was discovered in zzcms 2019. SQL Injection exists in dl/dldownload.php via an id parameter value with a trailing comma...

CVE-2019-12350

CVE-2019-12350 affects zzCMS (2019) with a SQL Injection in the script /dl/dl_download.php where an id parameter value with a trailing comma is unsafely handled. Root cause: lack of input filtering/validation for the id parameter, enabling injection. Consequences per the entry indicate a high-sev...

CVE-2019-12349

The CVE-2019-12349 entry applies to the zzCMS 2019 CMS, where a SQL injection exists in /admin/dl_sendsms.php via the id parameter. The vulnerability is rooted in improper handling of the id input, with public sources citing the lack of single quotes as the underlying cause (CNVD-2022-56481, RH a...

CVE-2019-12349

An issue was discovered in zzcms 2019. SQL Injection exists in /admin/dlsendsms.php via the id parameter...

CVE-2019-12351

CVE-2019-12351 affects zzCMS (2019) with SQL Injection in /dl/dl_print.php via the id parameter, caused by insufficient input validation (trailing comma). Public references in connected docs confirm the vulnerability pattern but do not provide exploit details or patches. Impact per CVSS in initia...

CVE-2019-12351

An issue was discovered in zzcms 2019. SQL Injection exists in dl/dlprint.php via an id parameter value with a trailing comma...

PT-2022-8081

Name of the Vulnerable Software and Affected Versions zzcms version 2019 Description An issue exists in the software, allowing SQL Injection in the /admin/dl sendsms.php endpoint via the id parameter. Recommendations For zzcms version 2019, avoid using the id parameter in the /admin/dl sendsms.ph...

PT-2022-8083

Name of the Vulnerable Software and Affected Versions zzcms version 2019 Description An issue exists in the software where SQL Injection is possible. This occurs in the dl/dl print.php file through an id parameter value that has a trailing comma. Recommendations For zzcms version 2019, avoid usin...

PT-2022-8082

Name of the Vulnerable Software and Affected Versions zzcms version 2019 Description An issue exists in zzcms 2019 where SQL Injection is possible in the "dl/dl download.php" endpoint via the id parameter when its value contains a trailing comma. Recommendations For zzcms version 2019, avoid usin...

CVE-2019-12350: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in zzcms 2019. SQL Injection exists in dl/dldownload.php via an id parameter value with a trailing comma...

ZZCMS SQL注入漏洞

ZZCMS is a content management system CMS from the ZZCMS team in China. zzCMS version 2019 is vulnerable to SQL injection, which stems from the lack of security filtering of the id parameter in /dl/dldownload.php. No detailed vulnerability details are provided at this time...

CVE-2019-12349: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in zzcms 2019. SQL Injection exists in /admin/dlsendsms.php via the id parameter...

ZZCMS SQL注入漏洞

ZZCMS is a content management system CMS by the ZZCMS team in China. zzCMS version 2019 is vulnerable to SQL injection, which stems from the lack of single quotes in the id parameter of /admin/dlsendsms.php. No detailed vulnerability details are currently available...

CVE-2019-12351: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in zzcms 2019. SQL Injection exists in dl/dlprint.php via an id parameter value with a trailing comma...

ZZCMS Cross-Site Scripting Vulnerability (CNVD-2022-71404)

ZZCMS is a content management system CMS from the Zzcms team in China. ZZCMS 2021 is vulnerable to a cross-site scripting vulnerability that originates from a lack of restriction and filtering of user parameters in admanage.php. An attacker could exploit this vulnerability to execute client-side...