1162 matches found
CVE-2018-16344: Improper Limitation of a Pathname to a Restricted Directory
An issue was discovered in zzcms 8.3. It allows remote attackers to delete arbitrary files via directory traversal sequences in the flv parameter. This can be leveraged for database access by deleting install.lock...
PT-2018-13504
Name of the Vulnerable Software and Affected Versions zzcms version 8.3 Description An issue in zzcms allows remote attackers to delete arbitrary files via directory traversal sequences in the flv parameter, potentially leading to database access by deleting install.lock. Recommendations For zzcm...
ZZCMS SQL Injection Vulnerability (CNVD-2018-15848)
ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A SQL injection vulnerability exists in line 5 of the zt/top.php file in ZZCMS 8.3 and earlier versions. A remote attacker can exploit this vulnerability by running ZZCMS in nginx to execute arbitrary SQL...
zzcms 8.3 arbitrary file deletion vulnerability deep thinking-vulnerability warning-the black bar safety net
In the analysis of the already existing cve in the process, discovered zzcms 8.3 comparison of the previous version of the function improved, so by the follow-up look, there is no problem, and sure enough found the problem. CMS for file storage implementation Because I myself have done similar cm...
CVE-2018-1000653
zzcms version 8.3 and earlier contains a SQL Injection vulnerability in zt/top.php line 5 that can result in could be attacked by sql injection in zzcms in nginx. This attack appear to be exploitable via running zzcms in nginx...
CVE-2018-1000653
zzcms version 8.3 and earlier contains a SQL Injection vulnerability in zt/top.php line 5 that can result in could be attacked by sql injection in zzcms in nginx. This attack appear to be exploitable via running zzcms in nginx...
Sql injection
zzcms version 8.3 and earlier contains a SQL Injection vulnerability in zt/top.php line 5 that can result in could be attacked by sql injection in zzcms in nginx. This attack appear to be exploitable via running zzcms in nginx...
CVE-2018-1000653
zzcms version 8.3 and earlier contains a SQL Injection vulnerability in zt/top.php line 5 that can result in could be attacked by sql injection in zzcms in nginx. This attack appear to be exploitable via running zzcms in nginx...
CVE-2018-1000653
CVE-2018-1000653 affects ZZCMS 8.3 and earlier. A SQL injection vulnerability exists in the zt/top.php file (line 5). The Red Hat and CNVD/CVE records and related sources indicate the issue can be triggered when ZZCMS is run under nginx, allowing an attacker to influence SQL commands. The public ...
Arbitrary file deletion vulnerability in admin/ad_user_modify.php in zzcms product version 8.3
ZZCMS Product Edition is a CMS Content Management System for quickly building investment-oriented websites. An arbitrary file deletion vulnerability exists in admin/adusermodify.php in ZZCMS Product Edition 8.3. An attacker can exploit the vulnerability to delete arbitrary files...
PT-2018-9506
Name of the Vulnerable Software and Affected Versions zzcms versions 8.3 and earlier Description The issue is related to a SQL Injection vulnerability in the zt/top.php file at line 5. This vulnerability can be exploited when running zzcms in nginx, potentially allowing an attack via SQL injectio...
CVE-2018-1000653: Improper Neutralization of Special Elements used in an SQL Command
zzcms version 8.3 and earlier contains a SQL Injection vulnerability in zt/top.php line 5 that can result in could be attacked by sql injection in zzcms in nginx. This attack appear to be exploitable via running zzcms in nginx...
ZZCMS V8.2 has arbitrary directory deletion vulnerability
ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. ZZCMS V8.2 has an arbitrary directory deletion vulnerability, which can be exploited by attackers to delete arbitrary files...
ZZCMS SQL Injection Vulnerability (CNVD-2018-15398)
ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A SQL injection vulnerability exists in the dl/dlsendmail.php file in ZZCMS version 8.3. A remote attacker can exploit this vulnerability to obtain the administrator password with the help of the 'sql' paramet...
CVE-2018-14963
zzcms 8.3 has CSRF via the admin/adminadd.php?action=add URI...
Cross site request forgery (csrf)
zzcms 8.3 has CSRF via the admin/adminadd.php?action=add URI...
Cross site scripting
zzcms 8.3 has stored XSS related to the content variable in user/manage.php and zt/show.php...
Sql injection
dl/dlsendmail.php in zzcms 8.3 has SQL Injection via the sql parameter...