SQL injection vulnerability in ZZCMS jsout/hit.php file

ZZCMS is a PHP-written enterprise website builder. ZZCMS jsout/hit.php file SQL injection vulnerability, the vulnerability is caused by the failure to effectively filter the editor parameter due to the attacker to obtain sensitive database information...

Reinstallation Logic Vulnerability in zzcmsV8.0

ZZCMS is a PHP-developed enterprise website builder. A reinstallation logic vulnerability exists in zzcmsV8.0. Due to a logic vulnerability in the judgment of the installation lock file install.lock, an attacker can exploit the vulnerability to reinstall the system and destroy the program...

ZZCMS V8.0 SQL Injection Vulnerability in admin/adclass.php File

ZZCMS is an enterprise website building program A SQL injection vulnerability exists in the modifybigclass function of the ZZCMS V8.0 admin/adclass.php file. The vulnerability is caused by the failure to effectively filter parameters, resulting in an injection vulnerability that allows an attacke...

ZZCMS V8.0 SQL Injection Vulnerability in admin/about.php File

ZZCMS is an enterprise website builder. A SQL injection vulnerability exists in the ZZCMS V8.0 admin/about.php file. The lack of filtering of the 'id' parameter obtained from $post'id' allows an attacker to exploit the vulnerability to obtain sensitive database information...

zzcms dl/dladd.php SQL injection

No description provided by source...

zzcms special/search.php SQL injection vulnerability

No description provided by source...

zzcms user/logincheck.php SQL injection vulnerability

inc/function.php 72 line php function getip if getenv"HTTPCLIENTIP" && strcasecmpgetenv"HTTPCLIENTIP", "unknown" $ip = getenv"HTTPCLIENTIP"; else if getenv"HTTPXFORWARDEDFOR" && strcasecmpgetenv"HTTPXFORWARDEDFOR", "unknown" $ip = getenv"HTTPXFORWARDEDFOR"; else if getenv"REMOTEADDR" &&...

zzcms admin/logincheck.php SQL injection vulnerability

inc/function.php 72 line php function getip if getenv"HTTPCLIENTIP" && strcasecmpgetenv"HTTPCLIENTIP", "unknown" $ip = getenv"HTTPCLIENTIP"; else if getenv"HTTPXFORWARDEDFOR" && strcasecmpgetenv"HTTPXFORWARDEDFOR", "unknown" $ip = getenv"HTTPXFORWARDEDFOR"; else if getenv"REMOTEADDR" &&...

SQL Injection Vulnerability in zzcms 'zx.php'

ZZCMS is an enterprise website builder. A SQL injection vulnerability exists in zzcms 'zx.php'. It allows attackers to exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in ZZCMS 'subzs.php'

ZZCMS is an enterprise website builder. A SQL injection vulnerability exists in ZZCMS 'subzs.php'. It allows attackers to exploit the vulnerability to obtain sensitive information about the database...

SQL Injection Vulnerability in Zzcms admin/logincheck.php Page

ZZCMS is an enterprise website builder. A SQL injection vulnerability exists in the zzcms admin/logincheck.php page. Due to the failure to filter variables coming from $SERVER, an attacker can exploit the vulnerability to obtain sensitive database data...

Zzcms V7.2 Arbitrary File Deletion Vulnerability

ZZCMS is an enterprise website builder. An arbitrary file deletion vulnerability exists in the '/user/delimg.php' page of Zzcms V7.2. An attacker is allowed to exploit the vulnerability to delete arbitrary files, or can cause a reinstallation...

Multiple SQL Injection Vulnerabilities in ZZCMS 7.2

ZZCMS is an enterprise website builder. A SQL injection vulnerability exists in the username parameter on the /reg/userregcheckemail.php page, the bigclass parameter on the zt/zs.php page, and the pagesize parameter on the /zh/zh.php page. An attacker can exploit the vulnerabilities to obtain...

Multiple XSS Vulnerabilities in ZZCMS 7.2

ZZCMS is an enterprise website builder. ZZCMS 7.2 suffers from an XSS vulnerability in the /inc/top.php page and the Uploadimgform.php page. An attacker can exploit the vulnerability to inject arbitrary Web script or HTML...

Arbitrary File Read Vulnerability in zzcms 7.2 Version

ZZCMS highlights the investment and supply and demand functions, you can quickly build a product investment website. ZZCMS v7.1 has an arbitrary file read vulnerability that can be exploited by an attacker to access restricted directories and execute commands outside the root directory of the web...

Reinstallation vulnerability in zzcms version 7.2

ZZCMS highlights the investment and supply and demand functions, you can quickly build a product investment website. ZZCMS system v7.1 has a reinstallation vulnerability that allows an attacker to exploit the vulnerability by visiting /install/index.php, submitting: POST request: submit=1&step=4,...

SQL Injection Vulnerability in zzcms Latest Product Version /zs/search.php Page

ZZCMS highlights the investment and supply and demand functions, you can quickly build a product investment website. zzcms latest product version /zs/search.php page SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive database data...

zzcms user/check.php has arbitrary user password change vulnerability

ZZCMS highlights the investment and supply and demand functions, you can quickly build a product investment website. zzcms latest product version of any user password change vulnerability, the vulnerability trigger point in /user/check.php, the attacker can take advantage of the vulnerability to...

SQL Injection Vulnerability in zzcms Latest Product Version /zx/search.php Page

ZZCMS highlights the investment and supply and demand functions, you can quickly build a product investment website. A SQL injection vulnerability exists in the /zx/search.php page of the latest product version of zzcms. Attackers can use the vulnerability to obtain sensitive database data...

SQL Injection Vulnerability in zzcms /dl/show.php

ZZCMS highlights the investment and supply and demand functions, you can quickly build a product investment website. The latest product version of zzcms has SQL injection vulnerability, the vulnerability trigger point in /dl/show.php, the attacker can use the vulnerability to obtain sensitive...