ZZCMS Password Reset Vulnerability

ZZCMS is a content management system CMS by Zzcms team in China. A password reset vulnerability exists in zzcms version 201910. The vulnerability stems from The vulnerability stems from an improperly designed or implemented code development process for a web-based system or product. An attacker c...

CVE-2020-21342

Insecure permissions issue in zzcms 201910 via the reset any user password in /one/getpassword.php...

CVE-2020-21342

Insecure permissions issue in zzcms 201910 via the reset any user password in /one/getpassword.php...

Default credentials

Insecure permissions issue in zzcms 201910 via the reset any user password in /one/getpassword.php...

CVE-2020-21342

CVE-2020-21342 affects the zzcms web application (version 201910). The issue is an insecure permissions weakness in the password reset flow, specifically via /one/getpassword.php, allowing an attacker to reset any user password. Root cause described as improperly designed or implemented code for ...

CVE-2020-21342

Insecure permissions issue in zzcms 201910 via the reset any user password in /one/getpassword.php...

PT-2021-10612

Name of the Vulnerable Software and Affected Versions: zzcms version 201910 Description: The issue is related to insecure permissions, allowing the reset of any user's password via the /one/getpassword.php endpoint. Recommendations: For zzcms version 201910, consider restricting access to the...

ZZCMS 安全漏洞

ZZCMS is a content management system CMS by Zzcms team in China. A password reset vulnerability exists in zzcms version 201910. The vulnerability stems from The vulnerability stems from an improperly designed or implemented code development process for a web-based system or product. An attacker c...

CVE-2020-21342: Incorrect Default Permissions

Insecure permissions issue in zzcms 201910 via the reset any user password in /one/getpassword.php...

zzcms elevation of privilege vulnerability

ZZCMS is the content management system of Webmaster Merchants. An elevation of privilege vulnerability exists in /user/adv.php in zzcms version 201910. An attacker can exploit this vulnerability to modify data, which can be used to launch further attacks...

CVE-2020-23426

zzcms 201910 contains an access control vulnerability through escalation of privileges in /user/adv.php, which allows an attacker to modify data for further attacks such as CSRF...

CVE-2020-23426

zzcms 201910 contains an access control vulnerability through escalation of privileges in /user/adv.php, which allows an attacker to modify data for further attacks such as CSRF...

Improper access control

zzcms 201910 contains an access control vulnerability through escalation of privileges in /user/adv.php, which allows an attacker to modify data for further attacks such as CSRF...

CVE-2020-23426

zzcms 201910 contains an access control vulnerability through escalation of privileges in /user/adv.php, which allows an attacker to modify data for further attacks such as CSRF...

CVE-2020-23426

CVE-2020-23426 affects zzcms 201910, with an elevation of privilege in /user/adv.php that allows an attacker to modify data. Root cause is an access-control weakness enabling unauthorized data modification, enabling further attacks such as CSRF. Affected product/version: zzcms 201910; vulnerabili...

ZZCMS 访问控制错误漏洞

ZZCMS is the content management system of Webmaster Merchants. An elevation of privilege vulnerability exists in /user/adv.php in zzcms version 201910. An attacker can exploit this vulnerability to modify data, which can be used to launch further attacks...

PT-2021-10896

Name of the Vulnerable Software and Affected Versions zzcms version 201910 Description The issue is related to an access control vulnerability that allows escalation of privileges. This vulnerability is exploited through the "/user/adv.php" API endpoint, which enables an attacker to modify data...

CVE-2020-23426: Cross-Site Request Forgery (CSRF)

zzcms 201910 contains an access control vulnerability through escalation of privileges in /user/adv.php, which allows an attacker to modify data for further attacks such as CSRF...

Logic flaw vulnerability in ZZCMS (CNVD-2021-24717)

ZZCMS is a completely open source based on PHP, ASP's product investment website management system , project investment website management system , enterprise website management system . ZZCMS has a logic flaw vulnerability. Attackers can use this vulnerability to delete any data in the database...

Command Execution Vulnerability in zzzcms V1.5.1

zzcms is a free open source website building system, mainly facing the majority of webmasters to use, do not need authorization, can be free of charge commercially. zzzcms V1.5.1 sa.php file in the command execution vulnerability, an attacker can use the vulnerability to obtain server control...