18 matches found
EUVD-2021-29900
Malicious code in bioql PyPI...
EUVD-2021-32066
Malicious code in bioql PyPI...
EUVD-2021-33113
Malicious code in bioql PyPI...
CVE-2021-42945
A SQL Injection vulnerability exists in ZZCMS 2021 via the askbigclassid parameter in /admin/ask.php...
CVE-2021-46436
An issue was discovered in ZZCMS 2021. There is a SQL injection vulnerability in admanage.php...
CVE-2021-46437
An issue was discovered in ZZCMS 2021. There is a cross-site scripting XSS vulnerability in admanage.php...
CVE-2021-46436
An issue was discovered in ZZCMS 2021. There is a SQL injection vulnerability in admanage.php...
CVE-2021-46437
An issue was discovered in ZZCMS 2021. There is a cross-site scripting XSS vulnerability in admanage.php...
CVE-2021-46437
An issue was discovered in ZZCMS 2021. There is a cross-site scripting XSS vulnerability in admanage.php...
Cross site scripting
An issue was discovered in ZZCMS 2021. There is a cross-site scripting XSS vulnerability in admanage.php...
CVE-2021-46437
An issue was discovered in ZZCMS 2021. There is a cross-site scripting XSS vulnerability in admanage.php...
Unauthorized Access Vulnerability in zzcms 2021
zzcms is an enterprise website builder. An unauthorized access vulnerability exists in zzcms 2021, which can be exploited by attackers to obtain sensitive information...
CVE-2021-45286
Directory Traversal vulnerability exists in ZZCMS 2021 via the skin parameter in 1 index.php, 2 bottom.php, and 3 topindex.php...
CVE-2021-42945
A SQL Injection vulnerability exists in ZZCMS 2021 via the askbigclassid parameter in /admin/ask.php...
CVE-2021-42945
A SQL Injection vulnerability exists in ZZCMS 2021 via the askbigclassid parameter in /admin/ask.php...
Sql injection
A SQL Injection vulnerability exists in ZZCMS 2021 via the askbigclassid parameter in /admin/ask.php...
CVE-2021-42945
CVE-2021-42945 is a confirmed SQL Injection in ZZCMS 2021, exploitable via the askbigclassid parameter in /admin/ask.php. The vulnerability stems from lack of input validation on external SQL statements, allowing an attacker to execute arbitrary SQL commands and potentially exfiltrate sensitive d...
CVE-2021-40279
CVE-2021-40279 affects the zz cms (ZZCMS) platform. The vulnerability is an SQL injection in the admin/bad.php file, exploitable via the id parameter. Affected versions include 8.2, 8.3, and the 2020/2021 branches. The root cause is lack of input validation for external input in the SQL statement...