zzcms SQL Injection Vulnerability (CNVD-2019-13262)

ZZCMS is a content management system CMS by the ZZCMS team in China. A SQL injection vulnerability exists in the /user/jobmanage.php file in ZZCMS version 8.3. A remote attacker can exploit this vulnerability to execute SQL commands with the help of the 'bigclass' parameter...

zzcms SQL Injection Vulnerability (CNVD-2019-13260)

ZZCMS is a content management system CMS by the ZZCMS team in China. A SQL injection vulnerability exists in the /user/logincheck.php file in ZZCMS version 8.3. The vulnerability can be exploited by a remote attacker to execute SQL commands with the help of the 'X-Forwarded' parameter in the HTTP...

CVE-2018-17412

zzcms v8.3 contains a SQL Injection vulnerability in /user/logincheck.php via an X-Forwarded-For HTTP header...

Cross site scripting

XSS exists in zzcms v8.3 via the /uploadimgform.php noshuiyin parameter...

CVE-2018-17414

zzcms v8.3 has a SQL injection in /user/jobmanage.php via the bigclass parameter...

CVE-2018-17413

XSS exists in zzcms v8.3 via the /uploadimgform.php noshuiyin parameter...

CVE-2018-17415

zzcms V8.3 has a SQL injection in /user/zselite.php via the id parameter...

Sql injection

zzcms V8.3 has a SQL injection in /user/zselite.php via the id parameter...

CVE-2018-17416

A SQL injection vulnerability exists in zzcms v8.3 via the /admin/adclass.php bigclassid parameter...

CVE-2018-17413

XSS exists in zzcms v8.3 via the /uploadimgform.php noshuiyin parameter...

Sql injection

A SQL injection vulnerability exists in zzcms v8.3 via the /admin/adclass.php bigclassid parameter...

Sql injection

zzcms v8.3 has a SQL injection in /user/jobmanage.php via the bigclass parameter...

Sql injection

zzcms v8.3 contains a SQL Injection vulnerability in /user/logincheck.php via an X-Forwarded-For HTTP header...

CVE-2018-17412

zzcms v8.3 contains a SQL Injection vulnerability in /user/logincheck.php via an X-Forwarded-For HTTP header...

CVE-2018-17414

zzcms v8.3 has a SQL injection in /user/jobmanage.php via the bigclass parameter...

CVE-2018-17415

zzcms V8.3 has a SQL injection in /user/zselite.php via the id parameter...

CVE-2018-17416

A SQL injection vulnerability exists in zzcms v8.3 via the /admin/adclass.php bigclassid parameter...

CVE-2018-17416

A SQL injection vulnerability exists in zzcms v8.3 via the /admin/adclass.php bigclassid parameter...

CVE-2018-17414

zzcms v8.3 has a SQL injection in /user/jobmanage.php via the bigclass parameter...

CVE-2018-17413

ZZCMS v8.3 is affected by a cross-site scripting (XSS) vulnerability in /uploadimg_form.php via the noshuiyin parameter. Root cause: unsanitized input leading to HTML/JS injection. Documented impact per sources: ability to inject scripts; CVSS3.0 base score 6.1 (MEDIUM) with user interaction requ...