1162 matches found
CVE-2021-45347
An Incorrect Access Control vulnerability exists in zzcms 8.2, which lets a malicious user bypass authentication by changing the user name in the cookie to use any password...
CVE-2021-45347
An Incorrect Access Control vulnerability exists in zzcms 8.2, which lets a malicious user bypass authentication by changing the user name in the cookie to use any password...
CVE-2021-45347
An Incorrect Access Control vulnerability exists in zzcms 8.2, which lets a malicious user bypass authentication by changing the user name in the cookie to use any password...
CVE-2021-45347
CVE-2021-45347 affects zzcms 8.2. It is an Incorrect Access Control vulnerability allowing an unauthenticated attacker to bypass login by changing the username in the cookie to use any password. The connected sources consistently describe this flaw as an authentication bypass in zzcms 8.2. No spe...
CVE-2021-45347: Improper Authentication
An Incorrect Access Control vulnerability exists in zzcms 8.2, which lets a malicious user bypass authentication by changing the user name in the cookie to use any password...
PT-2022-12330
Name of the Vulnerable Software and Affected Versions zzcms version 8.2 Description An issue exists that allows a malicious user to bypass authentication by modifying the username in the cookie, enabling the use of any password. Recommendations For zzcms version 8.2, update the software to a...
zzcms 授权问题漏洞
ZZCMS is a content management system CMS from the Zzcms team in China. zzcms suffers from a security vulnerability that stems from an incorrect access control vulnerability in zzcms 8.2, which could be exploited by attackers to allow malicious users to bypass authentication by changing the userna...
CVE-2021-45286
Directory Traversal vulnerability exists in ZZCMS 2021 via the skin parameter in 1 index.php, 2 bottom.php, and 3 topindex.php...
CVE-2021-45286
Directory Traversal vulnerability exists in ZZCMS 2021 via the skin parameter in 1 index.php, 2 bottom.php, and 3 topindex.php...
CVE-2021-45286
Directory Traversal vulnerability exists in ZZCMS 2021 via the skin parameter in 1 index.php, 2 bottom.php, and 3 topindex.php...
Directory traversal
Directory Traversal vulnerability exists in ZZCMS 2021 via the skin parameter in 1 index.php, 2 bottom.php, and 3 topindex.php...
CVE-2021-45286
Directory Traversal vulnerability exists in ZZCMS 2021 via the skin parameter in 1 index.php, 2 bottom.php, and 3 topindex.php...
CVE-2021-45286
CVE-2021-45286 : A directory traversal vulnerability affects ZZCMS 2021, exploitable via the skin parameter in 1) index.php, 2) bottom.php, and 3) top_index.php. The issue is rooted in improper input handling that allows accessing paths outside the intended directory. Documented impact centers on...
ZZCMS 路径遍历漏洞
ZZCMS is a content management system CMS from the China Zzcms team. ZZCMS suffers from a path traversal vulnerability that arises from a failure of a networked system or product to properly filter special elements in the path of a resource or file. An attacker can exploit this vulnerability to...
PT-2022-12319
Name of the Vulnerable Software and Affected Versions ZZCMS version 2021 Description A Directory Traversal issue exists via the skin parameter in several PHP files, including "index.php", "bottom.php", and "top index.php". This allows for potential unauthorized access to sensitive files...
CVE-2021-45286: Improper Limitation of a Pathname to a Restricted Directory
Directory Traversal vulnerability exists in ZZCMS 2021 via the skin parameter in 1 index.php, 2 bottom.php, and 3 topindex.php...
ZZCMS SQL Injection Vulnerability (CNVD-2021-101691)
ZZCMS is a content management system CMS from the Zzcms team in China.ZZCMS is vulnerable to SQL injection in 2021, which stems from a lack of validation of external input SQL statements in the askbigclassid parameter of /admin/ask.php in the application. An attacker could use this vulnerability ...
CVE-2021-42945
A SQL Injection vulnerability exists in ZZCMS 2021 via the askbigclassid parameter in /admin/ask.php...