ZZCMS 安全漏洞

ZZCMS is a content management system CMS from the ZZCMS team in China. A security vulnerability exists in ZZCMS v.2023 and previous versions. A remote attacker can exploit the vulnerability to obtain sensitive information via the id parameter in the adv2.php component...

ZZCMS 跨站脚本漏洞

ZZCMS is a content management system CMS by the ZZCMS team in China. A cross-site scripting vulnerability exists in ZZCMS v.2023 and prior versions, which stems from a phpinfo function that discloses detailed information about the PHP environment, including server configuration, loaded modules, a...

CVE-2024-44819

Cross Site Scripting vulnerability in ZZCMS v.2023 and before allows a remote attacker to obtain sensitive information via a crafted script to the pagename parameter of the admin/del.php component...

CVE-2024-44817

SQL Injection vulnerability in ZZCMS v.2023 and before allows a remote attacker to obtain sensitive information via the id parameter in the adv2.php component...

CVE-2024-44821

ZZCMS 2023 contains a vulnerability in the captcha reuse logic located in /inc/function.php. The checkyzm function does not properly refresh the captcha value after a failed validation attempt. As a result, an attacker can exploit this flaw by repeatedly submitting the same incorrect captcha...

CVE-2024-44818

Cross Site Scripting vulnerability in ZZCMS v.2023 and before allows a remote attacker to obtain sensitive information via the HTTPReferer header of the caina.php component...

CVE-2024-44818

Cross Site Scripting vulnerability in ZZCMS v.2023 and before allows a remote attacker to obtain sensitive information via the HTTPReferer header of the caina.php component...

CVE-2024-44817

The content management system ZZCMS (version v.2023 and before ) is vulnerable to a SQL Injection vulnerability. A remote attacker can exploit the id parameter in the adv2.php component to obtain sensitive information. As a temporary workaround, it is recommended to disable the id parameter in th...

CVE-2024-44820

A sensitive information disclosure vulnerability exists in ZZCMS v.2023 and before . The issue is located in the eginfo.php file at the path /3/E_bak5.1/upload/. When an attacker accesses this file using the query parameter phome=ShowPHPInfo , the application executes the phpinfo() function. This...

CVE-2024-44818

The ZZCMS content management system (version 2023 and before ) contains a Cross-Site Scripting (XSS) vulnerability in the caina.php component. The root cause is the improper handling of the HTTP_Referer header, which allows a remote attacker to inject malicious scripts or HTML code. Successful ex...

CVE-2024-44817

SQL Injection vulnerability in ZZCMS v.2023 and before allows a remote attacker to obtain sensitive information via the id parameter in the adv2.php component...

CVE-2024-44821

ZZCMS 2023 contains a vulnerability in the captcha reuse logic located in /inc/function.php. The checkyzm function does not properly refresh the captcha value after a failed validation attempt. As a result, an attacker can exploit this flaw by repeatedly submitting the same incorrect captcha...

CVE-2024-44820

A sensitive information disclosure vulnerability exists in ZZCMS v.2023 and before within the eginfo.php file located at /3/Ebak5.1/upload/. When accessed with the query parameter phome=ShowPHPInfo, the application executes the phpinfo function, which exposes detailed information about the PHP...

CVE-2024-44819

Cross Site Scripting vulnerability in ZZCMS v.2023 and before allows a remote attacker to obtain sensitive information via a crafted script to the pagename parameter of the admin/del.php component...

PT-2024-31264 · Zzcms · Zzcms

Name of the Vulnerable Software and Affected Versions: ZZCMS versions 2023 and earlier Description: The issue allows a remote attacker to obtain sensitive information. This is achieved via the id parameter in the "adv2.php" component. Recommendations: For ZZCMS versions 2023 and earlier, consider...

PT-2024-31265 · Zzcms · Zzcms

Name of the Vulnerable Software and Affected Versions: ZZCMS versions 2023 and earlier Description: The issue allows a remote attacker to obtain sensitive information via the HTTP Referer header of the caina.php component. This is a Cross Site Scripting vulnerability, which enables the attacker t...

PT-2024-31266 · Zzcms · Zzcms

Name of the Vulnerable Software and Affected Versions: ZZCMS versions 2023 and earlier Description: A Cross Site Scripting issue allows a remote attacker to obtain sensitive information via a crafted script to the pagename parameter of the "admin/del.php" component. This flaw enables the attacker...

PT-2024-31269

Name of the Vulnerable Software and Affected Versions ZZCMS 2023 Description The issue is related to the captcha reuse logic in ZZCMS 2023, specifically in the /inc/function.php file. The checkyzm function does not properly refresh the captcha value after a failed validation attempt. This allows ...

PT-2024-31268

Name of the Vulnerable Software and Affected Versions ZZCMS versions 2023 and earlier Description A sensitive information disclosure issue exists in the eginfo.php file, located at /3/E bak5.1/upload/. When accessed with the query parameter phome=ShowPHPInfo, the application executes the phpinfo...

CVE-2024-44821: Improper Authentication

ZZCMS 2023 contains a vulnerability in the captcha reuse logic located in /inc/function.php. The checkyzm function does not properly refresh the captcha value after a failed validation attempt. As a result, an attacker can exploit this flaw by repeatedly submitting the same incorrect captcha...