1090 matches found
Sql injection
An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin/showbad.php when the attacker has admin authority via the id parameter...
Sql injection
An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin/dlsendmail.php when the attacker has admin authority via the id parameter...
Sql injection
An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /user/dlsprint.php when the attacker has dlsprint authority via the id parameter...
Sql injection
An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /dl/dlsendsms.php when the attacker has dlsprint authority via a dlid cookie...
Sql injection
An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /user/dlsdownload.php when the attacker has dlsdownload authority via the id parameter...
Sql injection
An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin/deluser.php when the attacker has admin authority via the id parameter...
CVE-2019-12352
An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /dl/dlsendmail.php when the attacker has dlsprint authority via a dlid cookie...
CVE-2019-12352
CVE-2019-12352 describes a SQL injection vulnerability in zzcms 2019, exploitable in /dl/dl_sendmail.php via a dlid cookie when the attacker has dls_print authority. The issue arises from unsafely handling user-controlled data in the cookie which is used in a database query. Multiple connected so...
CVE-2019-12353
An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin/dlsendmail.php when the attacker has admin authority via the id parameter...
CVE-2019-12353
The CVE-2019-12353 entry affects ZZCMS 2019. A SQL injection vulnerability exists in /admin/dl_sendmail.php when an attacker has admin authority, exploitable via the id parameter. The Red Hat and CNVD/CNNVD, CVE records corroborate the same description. Impact is described as enabling information...
CVE-2019-12354
An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin/showbad.php when the attacker has admin authority via the id parameter...
CVE-2019-12354
CVE-2019-12354 affects zzcms 2019. There is a SQL injection vulnerability in /admin/showbad.php via the id parameter, exploitable by an attacker with admin authority. CVSS metrics in the record indicate high impact on confidentiality, integrity, and availability (CVSS 3.1 base score 7.2; network ...
CVE-2019-12355
An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /user/dlsprint.php when the attacker has dlsprint authority via the id parameter...
CVE-2019-12355
ZZCMS 2019 has a SQL injection vulnerability in /user/dls_print.php via the id parameter when the attacker has dls_print authority. This affects ZZCMS 2019 and could impact confidentiality, integrity, and availability as per CVSS metrics (high/critical-like impact across CIA). The CVE family and ...
CVE-2019-12356
An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /user/dlsdownload.php when the attacker has dlsdownload authority via the id parameter...
CVE-2019-12356
CVE-2019-12356 affects zzcms 2019 and is a SQL injection in /user/dls_download.php via the id parameter when the attacker has dls_download authority. The NVD entry documents a vulnerability class that allows partial/high impacts to confidentiality, integrity, and availability (CVSSv3.1 base score...
CVE-2019-12357
An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin/deluser.php when the attacker has admin authority via the id parameter...
CVE-2019-12357
CVE-2019-12357 affects ZZCMS 2019. The Red Hat/EUVD/CNVD/CVE records describe a SQL injection vulnerability in /admin/deluser.php when an attacker has admin authority, exploitable via the id parameter. Publicly available references corroborate the issue as a site‑level SQLi in ZZCMS 2019, with no...
CVE-2019-12358
Vulnerability context: CVE-2019-12358 affects ZZCMS (2019) with a SQL injection in /dl/dl_sendsms.php, exploit via a dlid cookie when the attacker has dls_print authority. Details supported by connected/docs: The issue is a SQL injection vulnerability in the specified PHP endpoint, triggered thro...