1162 matches found
ZZCMS 安全漏洞
ZZCMS is a content management system CMS from the Zzcms team in China. ZZCMS suffers from an access control error vulnerability that stems from an incorrect access control vulnerability in zzcms via admin.php, which can be exploited by an attacker to directly access the administrator console afte...
PT-2021-22851
Name of the Vulnerable Software and Affected Versions zzcms versions 8.2 through 8.3, 2020, 2021 Description The issue is related to an SQL Injection problem. It occurs via the id parameter in the "admin/dl sendmail.php" endpoint. Recommendations For versions 8.2, 8.3, 2020, and 2021, consider...
CVE-2021-40279: Improper Neutralization of Special Elements used in an SQL Command
An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, and 2021 via the id parameter in admin/bad.php...
PT-2021-22853
Name of the Vulnerable Software and Affected Versions zzcms versions 8.2 through 8.3, 2020, 2021 Description An SQL Injection issue exists in the dl/dl download.php file when registering ordinary users. This allows for potential exploitation during the user registration process. Recommendations F...
PT-2021-23922
Name of the Vulnerable Software and Affected Versions: zzcms versions less than or equal to 2019 Description: An issue exists due to incorrect access control in zzcms, allowing direct access to the administrator console via "admin.php" after disabling JavaScript. Recommendations: For zzcms versio...
CVE-2021-40280: Improper Neutralization of Special Elements used in an SQL Command
An SQL Injection vulnerablitly exits in zzcms 8.2, 8.3, 2020, and 2021 via the id parameter in admin/dlsendmail.php...
CVE-2021-43703: Undefined Security Weakness
An Incorrect Access Control vulnerability exists in zzcms less than or equal to 2019 via admin.php. After disabling JavaScript, you can directly access the administrator console...
CVE-2021-40281: Improper Neutralization of Special Elements used in an SQL Command
An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, and 2021 in dl/dlprint.php when registering ordinary users...
ZZCMS SQL注入漏洞
ZZCMS is a content management system CMS by China Zzcms team. A security vulnerability exists in ZZCMS 8.2, 8.3, 2020, 2021, which originates from a SQL injection when registering a regular user in dl/dlprint.php...
CVE-2021-40282: Improper Neutralization of Special Elements used in an SQL Command
An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, abd 2021 in dl/dldownload.php. when registering ordinary users...
ZZCMS SQL Injection Vulnerability (CNVD-2021-102064)
ZZCMS is a content management system CMS from the Zzcms team in China.ZZCMS version 2019 is vulnerable to a SQL injection vulnerability that originates from a missing validation of externally entered SQL statements in the id parameter on the application's /dl/dlprint.php page. An attacker could u...
ZZCMS SQL Injection Vulnerability (CNVD-2021-102063)
ZZCMS is a content management system CMS from the Zzcms team in China. ZZCMS version 2019 is vulnerable to SQL injection, which stems from the software's lack of effective filtering and escaping of SQL statements. An attacker retrieves sensitive data via the dlid parameter in the cookie on the...
ZZCMS SQL Injection Vulnerability (CNVD-2021-103656)
ZZCMS is a content management system CMS from the Zzcms team in China.ZZCMS version 2019 is vulnerable to a SQL injection vulnerability that originates from a missing validation of external input SQL statements in the dlid parameter on the application's /dl/dlprint.php page. An attacker could use...
ZZCMS subzs.php component SQL injection vulnerability
ZZCMS is a content management system CMS from the Zzcms team in China.ZZCMS version 2019 is vulnerable to SQL injection, which stems from the lack of effective filtering and escaping of SQL statements in the subzs.php component. An attacker could use this vulnerability to execute illegal SQL...
ZZCMS SQL注入漏洞
ZZCMS is a content management system CMS from the Zzcms team in China.ZZCMS version 2019 is vulnerable to SQL injection, which stems from the lack of effective filtering and escaping of SQL statements in the subzs.php component. An attacker could use this vulnerability to execute illegal SQL...
ZZCMS SQL注入漏洞
ZZCMS is a content management system CMS from the Zzcms team in China.ZZCMS version 2019 is vulnerable to a SQL injection vulnerability that originates from a missing validation of external input SQL statements in the dlid parameter on the application's /dl/dlprint.php page. An attacker could use...
ZZCMS SQL注入漏洞
ZZCMS is a content management system CMS from the Zzcms team in China.ZZCMS version 2019 is vulnerable to a SQL injection vulnerability that originates from a missing validation of externally entered SQL statements in the id parameter on the application's /dl/dlprint.php page. An attacker could u...
ZZCMS SQL注入漏洞
ZZCMS is a content management system CMS from the Zzcms team in China. ZZCMS version 2019 is vulnerable to SQL injection, which stems from the software's lack of effective filtering and escaping of SQL statements. An attacker retrieves sensitive data via the dlid parameter in the cookie on the...
