CVE-2018-18789

An issue was discovered in zzcms 8.3. SQL Injection exists in zt/top.php via a Host HTTP header to zt/news.php...

CVE-2018-18784: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in zzcms 8.3. SQL Injection exists in admin/tagmanage.php via the tabletag parameter. This needs an admin user login...

PT-2018-14656

Name of the Vulnerable Software and Affected Versions zzcms version 8.3 Description An issue exists in zzcms where SQL Injection is possible. This occurs in the zs list.php file via the pxzs cookie. Recommendations For zzcms version 8.3, consider restricting access to the zs list.php file or...

zzcms SQL Injection Vulnerability (CNVD-2018-26020)

ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A SQL injection vulnerability exists in the admin/tagmanage.php file in ZZCMS version 8.3. A remote attacker can exploit this vulnerability to obtain the current user name of mysql with the help of the...

PT-2018-14648

Name of the Vulnerable Software and Affected Versions zzcms version 8.3 Description An issue exists in the software where SQL Injection is possible. This occurs in the admin/tagmanage.php file through the tabletag parameter, and it requires an admin user to be logged in. Recommendations For zzcms...

CVE-2018-18788: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in zzcms 8.3. SQL Injection exists in admin/classmanage.php via the tablename parameter. This needs an admin user login...

PT-2018-14654

Name of the Vulnerable Software and Affected Versions zzcms version 8.3 Description An issue exists in the software where SQL Injection is possible. This occurs in the admin/special add.php endpoint via the zxbigclassid cookie, and it requires an admin user to be logged in. Recommendations For...

CVE-2018-18791: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in zzcms 8.3. SQL Injection exists in zs/search.php via a pxzs cookie...

PT-2018-14649

Name of the Vulnerable Software and Affected Versions zzcms version 8.3 Description An issue exists in zzcms where SQL Injection is possible. This occurs in the zs/subzs.php file when a zzcmscpid cookie is used to access the zs/search.php endpoint. Recommendations For zzcms version 8.3, consider...

PT-2018-14650

Name of the Vulnerable Software and Affected Versions zzcms version 8.3 Description An issue exists in zzcms where SQL Injection is possible. This occurs in the ajax/zs.php file through the pxzs cookie. Recommendations For zzcms version 8.3, consider restricting access to the ajax/zs.php file unt...

PT-2018-14652

Name of the Vulnerable Software and Affected Versions zzcms version 8.3 Description An issue exists in the software, where SQL Injection is possible in the admin/classmanage.php file via the tablename parameter. This issue requires an admin user to be logged in. Recommendations For zzcms version...

CVE-2018-18787: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in zzcms 8.3. SQL Injection exists in zs/zs.php via a pxzs cookie...

CVE-2018-18785: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in zzcms 8.3. SQL Injection exists in zs/subzs.php with a zzcmscpid cookie to zs/search.php...

PT-2018-14651

Name of the Vulnerable Software and Affected Versions zzcms version 8.3 Description An issue exists in zzcms where SQL Injection is possible. This occurs in the zs/zs.php file via the pxzs cookie. Recommendations For zzcms version 8.3, consider restricting access to the zs/zs.php file or removing...

CVE-2018-18786: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in zzcms 8.3. SQL Injection exists in ajax/zs.php via a pxzs cookie...

PT-2018-14655

Name of the Vulnerable Software and Affected Versions zzcms version 8.3 Description An issue exists in zzcms where SQL Injection is possible. This occurs in the zs/search.php file through the pxzs cookie. Recommendations For zzcms version 8.3, consider restricting access to the zs/search.php file...

CVE-2018-18792: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in zzcms 8.3. SQL Injection exists in zs/zslist.php via a pxzs cookie...

zzcms SQL Injection Vulnerability (CNVD-2018-26019)

ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A SQL injection vulnerability exists in the zs/zslist.php file in ZZCMS version 8.3. A remote attacker can exploit this vulnerability to obtain the current user name of mysql with the help of pxzs cookie...

zzcms SQL Injection Vulnerability (CNVD-2018-26021)

ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A SQL injection vulnerability exists in the zs/subzs.php file in ZZCMS version 8.3. A remote attacker can exploit this vulnerability to obtain the current user name of mysql with the help of zzcmscpid cookie...

CVE-2018-18790: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in zzcms 8.3. SQL Injection exists in admin/specialadd.php via a zxbigclassid cookie. This needs an admin user login...