1162 matches found
CVE-2022-44361: Improper Neutralization of Input During Web Page Generation
An issue was discovered in ZZCMS 2022. There is a cross-site scripting XSS vulnerability in admin/adlist.php...
ZZCMS 跨站脚本漏洞
ZZCMS is a content management system CMS from the ZZCMS team in China. A security vulnerability exists in ZZCMS version 2022, which stems from its admin/adlist.php component that allows attackers to implement cross-site scripting...
ZZCMS index php information leakage vulnerability
ZZCMS is a content management system CMS by the ZZCMS team in China. An information disclosure vulnerability exists in ZZCMS 2022, which stems from the program's inadequate protection of sensitive information, and can be exploited by an attacker to send a request to "/admin/index php?Server" to...
ZZCMS sendmailto.php SQL Injection Vulnerability
ZZCMS is a content management system CMS by the ZZCMS team in China. A SQL injection vulnerability exists in ZZCMS version 2022, which originates from /admin/sendmailto.php?tomail=&groupid= lack of validation of externally entered SQL statements. An attacker can exploit the vulnerability to execu...
CVE-2022-40444
ZZCMS 2022 was discovered to contain a full path disclosure vulnerability via the page /admin/index.PHP? server...
CVE-2022-40447
ZZCMS 2022 was discovered to contain a SQL injection vulnerability via the keyword parameter at /admin/baojialist.php...
CVE-2022-40443
An absolute path traversal vulnerability in ZZCMS 2022 allows attackers to obtain sensitive information via a crafted GET request sent to /one/siteinfo.php...
CVE-2022-40446
ZZCMS 2022 was discovered to contain a SQL injection vulnerability via the component /admin/sendmailto.php?tomail=&groupid=...
Sql injection
ZZCMS 2022 was discovered to contain a SQL injection vulnerability via the keyword parameter at /admin/baojialist.php...
Path traversal
An absolute path traversal vulnerability in ZZCMS 2022 allows attackers to obtain sensitive information via a crafted GET request sent to /one/siteinfo.php...
Path traversal
ZZCMS 2022 was discovered to contain a full path disclosure vulnerability via the page /admin/index.PHP? server...
Sql injection
ZZCMS 2022 was discovered to contain a SQL injection vulnerability via the component /admin/sendmailto.php?tomail=&groupid=...
CVE-2022-40447
CVE-2022-40447 affects ZZCMS 2022 with a SQL injection in the admin/baojia_list.php endpoint through the keyword parameter. The vulnerability is described as an SQL injection (concrete vulnerable vector: keyword parameter) and is rated with CVSS 3.1: 7.2 (HIGH) with network attack vector, low att...
CVE-2022-40447
ZZCMS 2022 was discovered to contain a SQL injection vulnerability via the keyword parameter at /admin/baojialist.php...
CVE-2022-40447
ZZCMS 2022 was discovered to contain a SQL injection vulnerability via the keyword parameter at /admin/baojialist.php...
CVE-2022-40447
ZZCMS 2022 was discovered to contain a SQL injection vulnerability via the keyword parameter at /admin/baojialist.php...
CVE-2022-40446
ZZCMS 2022 was discovered to contain a SQL injection vulnerability via the component /admin/sendmailto.php?tomail=&groupid=...
CVE-2022-40446
ZZCMS 2022 was discovered to contain a SQL injection vulnerability via the component /admin/sendmailto.php?tomail=&groupid=...
CVE-2022-40446
CVE-2022-40446 affects ZZCMS 2022; a SQL injection exists in the admin/sendmailto.php endpoint via the parameters tomail and groupid, due to lack of input validation. This vulnerability is described across multiple sources (Red Hat, CNVD, CVE records, OSV, CNVD) with a high impact (C, I, A) and n...