CVE-2024-52724

The content management system ZZCMS version 2023 is vulnerable to an SQL injection vulnerability located in the /q/show.php endpoint. This flaw allows for potential SQL injection attacks, which can impact the confidentiality, integrity, and availability of the database. To mitigate this risk, it ...

CVE-2024-52724

ZZCMS 2023 was discovered to contain a SQL injection vulnerability in /q/show.php...

PT-2024-35419 · Zzcms · Zzcms

Name of the Vulnerable Software and Affected Versions: ZZCMS version 2023 Description: A SQL injection issue was discovered in the /q/show.php endpoint. This issue allows for potential SQL injection attacks. Recommendations: For ZZCMS version 2023, consider restricting access to the /q/show.php...

CVE-2024-52724: Improper Neutralization of Special Elements used in an SQL Command

ZZCMS 2023 was discovered to contain a SQL injection vulnerability in /q/show.php...

ZZCMS 安全漏洞

ZZCMS is a content management system CMS by the ZZCMS team in China. A security vulnerability exists in ZZCMS version 2023, which stems from an SQL injection vulnerability contained in /q/show.php...

CVE-2024-11242

A vulnerability was found in ZZCMS 2023. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/adlist.php?action=pass of the component Keyword Filtering. The manipulation of the argument keyword leads to sql injection. The attack may be launched...

CVE-2024-11242

A vulnerability was found in ZZCMS 2023. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/adlist.php?action=pass of the component Keyword Filtering. The manipulation of the argument keyword leads to sql injection. The attack may be launched...

CVE-2024-11242 ZZCMS Keyword Filtering ad_list.php sql injection

A vulnerability was found in ZZCMS 2023. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/adlist.php?action=pass of the component Keyword Filtering. The manipulation of the argument keyword leads to sql injection. The attack may be launched...

CVE-2024-11242

CVE-2024-11242 affects ZZCMS 2023, in the function/endpoint /admin/ad_list.php?action=pass within the Keyword Filtering component. The issue stems from manipulating the keyword parameter, causing an SQL injection. The vulnerability is described as remotely exploitable with public exploit details....

CVE-2024-11242 ZZCMS Keyword Filtering ad_list.php sql injection

A vulnerability was found in ZZCMS 2023. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/adlist.php?action=pass of the component Keyword Filtering. The manipulation of the argument keyword leads to sql injection. The attack may be launched...

ZZCMS 注入漏洞

ZZCMS is a content management system CMS by the ZZCMS team in China. An injection vulnerability exists in ZZCMS version 2023, which originates from the parameter keyword in the file /admin/adlist.php?action=pass that can cause SQL injection...

PT-2024-16852 · Zzcms · Zzcms

Name of the Vulnerable Software and Affected Versions: ZZCMS version 2023 Description: A critical issue affects some unknown functionality of the file /admin/ad list.php?action=pass of the component Keyword Filtering. The manipulation of the keyword argument leads to SQL injection. The attack may...

CVE-2024-11242: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in ZZCMS 2023. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/adlist.php?action=pass of the component Keyword Filtering. The manipulation of the argument keyword leads to sql injection. The attack may be launched...

CVE-2024-11130

A vulnerability was found in ZZCMS up to 2023. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/msg.php. The manipulation of the argument keyword leads to cross site scripting. The attack may be launched remotely. The exploit has been...

CVE-2024-11130

A vulnerability was found in ZZCMS up to 2023. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/msg.php. The manipulation of the argument keyword leads to cross site scripting. The attack may be launched remotely. The exploit has been...

CVE-2024-11130 ZZCMS msg.php cross site scripting

A vulnerability was found in ZZCMS up to 2023. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/msg.php. The manipulation of the argument keyword leads to cross site scripting. The attack may be launched remotely. The exploit has been...

CVE-2024-11130 ZZCMS msg.php cross site scripting

A vulnerability was found in ZZCMS up to 2023. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/msg.php. The manipulation of the argument keyword leads to cross site scripting. The attack may be launched remotely. The exploit has been...

CVE-2024-11130

CVE-2024-11130 affects ZZCMS up to 2023. The issue is a cross-site scripting (XSS) vulnerability in the unknown-functionality of the file /admin/msg.php caused by manipulation of the keyword parameter. The attack could be launched remotely and the exploit has been disclosed publicly. Public sourc...

ZZCMS 代码注入漏洞

ZZCMS is a content management system CMS from the China ZZCMS team. A code injection vulnerability exists in ZZCMS version 2023 and earlier versions, which stems from an incorrect manipulation of the parameter keyword that can lead to cross-site scripting attacks...

PT-2024-16781 · Zzcms · Zzcms

Name of the Vulnerable Software and Affected Versions: ZZCMS versions up to 2023 Description: A vulnerability was found in ZZCMS, affecting some unknown functionality of the file /admin/msg.php. The manipulation of the keyword argument leads to cross-site scripting. The attack may be launched...