EUVD-2018-9167

Malware in sbrugna...

EUVD-2018-9169

Malware in sbrugna...

EUVD-2018-9170

Malware in sbrugna...

Sql injection

zzcms v8.3 has a SQL injection in /user/jobmanage.php via the bigclass parameter...

Sql injection

A SQL injection vulnerability exists in zzcms v8.3 via the /admin/adclass.php bigclassid parameter...

Cross site scripting

XSS exists in zzcms v8.3 via the /uploadimgform.php noshuiyin parameter...

Sql injection

zzcms v8.3 contains a SQL Injection vulnerability in /user/logincheck.php via an X-Forwarded-For HTTP header...

Sql injection

zzcms V8.3 has a SQL injection in /user/zselite.php via the id parameter...

CVE-2018-17414

zzcms v8.3 has a SQL injection in /user/jobmanage.php via the bigclass parameter...

CVE-2018-17415

zzcms V8.3 has a SQL injection in /user/zselite.php via the id parameter...

CVE-2018-17416

A SQL injection vulnerability exists in zzcms v8.3 via the /admin/adclass.php bigclassid parameter...

CVE-2018-17412

zzcms v8.3 contains a SQL Injection vulnerability in /user/logincheck.php via an X-Forwarded-For HTTP header...

CVE-2018-17413

XSS exists in zzcms v8.3 via the /uploadimgform.php noshuiyin parameter...

CVE-2018-17413

ZZCMS v8.3 is affected by a cross-site scripting (XSS) vulnerability in /uploadimg_form.php via the noshuiyin parameter. Root cause: unsanitized input leading to HTML/JS injection. Documented impact per sources: ability to inject scripts; CVSS3.0 base score 6.1 (MEDIUM) with user interaction requ...

CVE-2018-17412

zzcms v8.3 contains a SQL Injection vulnerability in /user/logincheck.php via an X-Forwarded-For HTTP header...

CVE-2018-17413

XSS exists in zzcms v8.3 via the /uploadimgform.php noshuiyin parameter...

CVE-2018-17414

zzcms v8.3 has a SQL injection in /user/jobmanage.php via the bigclass parameter...

CVE-2018-17415

zzcms V8.3 has a SQL injection in /user/zselite.php via the id parameter...

CVE-2018-17416

A SQL injection vulnerability exists in zzcms v8.3 via the /admin/adclass.php bigclassid parameter...

CVE-2018-17416

The CVE 2018-17416 entry describes a SQL injection vulnerability in zzcms v8.3, exploitable via the /admin/adclass.php bigclassid parameter. Affected component is the adclass handling in the admin area, where user-supplied bigclassid input enables SQL injection. The NVD/associated records indicat...