CVE-2019-1010148

zzcms version 8.3 and earlier is affected by: SQL Injection. The impact is: zzcms File Delete to Code Execution...

CVE-2019-1010148

ZZCMS v8.3 and earlier are vulnerable to SQL Injection due to lack of validation of externally entered SQL statements (CNVD/NVD RH/CVE references). The impact described across sources is that this leads from SQL injection to the ability to delete files and achieve code execution in zzcms. Details...

PT-2019-11483

Name of the Vulnerable Software and Affected Versions: zzcms versions 8.3 and earlier Description: The issue affects the user/manage.php component, specifically lines 31-80, and can lead to code execution through file deletion, resulting in a potential getshell impact. Recommendations: For zzcms...

CVE-2019-1010152: Missing Authorization

zzcms 8.3 and earlier is affected by: File Delete to Code Execution. The impact is: getshell. The component is: user/manage.php line 31-80...

CVE-2019-1010149: Missing Authorization

zzcms version 8.3 and earlier is affected by: File Delete to Code Execution. The impact is: zzcms File Delete to Code Execution. The component is: user/licencesave.php...

CVE-2019-1010150: Missing Authorization

zzcms 8.3 and earlier is affected by: File Delete to Code Execution. The impact is: getshell. The component is: /user/zssave.php...

PT-2019-11484

Name of the Vulnerable Software and Affected Versions: zzcms versions 8.3 and earlier Description: The issue affects the zs/subzs.php component and is related to SQL Injection, which can lead to sql inject impact. Recommendations: For zzcms versions 8.3 and earlier, at the moment, there is no...

PT-2019-11481

Name of the Vulnerable Software and Affected Versions: zzcms versions 8.3 and earlier Description: The issue affects the /user/zssave.php component, allowing for file deletion to code execution, which can lead to getshell impact. Recommendations: For zzcms versions 8.3 and earlier, at the moment,...

PT-2019-11480

Name of the Vulnerable Software and Affected Versions: zzcms versions 8.3 and earlier Description: The issue concerns a File Delete to Code Execution problem. It affects the user/licence save.php component. Recommendations: For zzcms versions 8.3 and earlier, update to a version later than 8.3 to...

PT-2019-11479

Name of the Vulnerable Software and Affected Versions: zzcms versions 8.3 and earlier Description: The issue affects zzcms, allowing for SQL Injection, which can lead to zzcms file deletion and potentially code execution. Recommendations: For zzcms versions 8.3 and earlier, at the moment, there i...

CVE-2019-1010148: Improper Neutralization of Special Elements used in an SQL Command

zzcms version 8.3 and earlier is affected by: SQL Injection. The impact is: zzcms File Delete to Code Execution...

CVE-2019-1010153: Improper Neutralization of Special Elements used in an SQL Command

zzcms 8.3 and earlier is affected by: SQL Injection. The impact is: sql inject. The component is: zs/subzs.php...

CVE-2019-1010151

zzcms zzmcms 8.3 and earlier is affected by: File Delete to getshell. The impact is: getshell. The component is: /user/ppsave.php...

CVE-2019-1010151

zzcms zzmcms 8.3 and earlier is affected by: File Delete to getshell. The impact is: getshell. The component is: /user/ppsave.php...

CVE-2019-1010151

CVE-2019-1010151 affects zzcms zzmcms ≤ 8.3. The vulnerability is in the /user/ppsave.php component, described as “File Delete to getshell,” with the impact being getshell. NVD lists CVSS v3.0 base score 9.8 (CRITICAL) and CVSS v2.0 base score 7.5 (HIGH); attack vector is network, no authenticati...

PT-2019-11482

Name of the Vulnerable Software and Affected Versions: zzcms versions 8.3 and earlier Description: The issue affects the /user/ppsave.php component, allowing File Delete to getshell, which can lead to getshell. Recommendations: For zzcms versions 8.3 and earlier, consider restricting access to th...

CVE-2019-1010151: Improper Limitation of a Pathname to a Restricted Directory

zzcms zzmcms 8.3 and earlier is affected by: File Delete to getshell. The impact is: getshell. The component is: /user/ppsave.php...

ZZCMS suffers from SQL injection vulnerability

ZZCMS is a content management system CMS by the ZZCMS team in China. ZZCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

ZZCMS has an xss vulnerability

ZZCMS is a content management system CMS by the ZZCMS team in China. An xss vulnerability exists in ZZCMS, which can be exploited by an attacker to obtain an administrator cookie...

zzcms SQL Injection Vulnerability (CNVD-2019-13262)

ZZCMS is a content management system CMS by the ZZCMS team in China. A SQL injection vulnerability exists in the /user/jobmanage.php file in ZZCMS version 8.3. A remote attacker can exploit this vulnerability to execute SQL commands with the help of the 'bigclass' parameter...