CVE-2019-12349: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in zzcms 2019. SQL Injection exists in /admin/dlsendsms.php via the id parameter...

ZZCMS Cross-Site Scripting Vulnerability (CNVD-2022-71404)

ZZCMS is a content management system CMS from the Zzcms team in China. ZZCMS 2021 is vulnerable to a cross-site scripting vulnerability that originates from a lack of restriction and filtering of user parameters in admanage.php. An attacker could exploit this vulnerability to execute client-side...

ZZCMS SQL Injection Vulnerability (CNVD-2022-56482)

ZZCMS is a content management system CMS from the Zzcms team in China. zzCMS2021 is vulnerable to SQL injection, which stems from a lack of filtering of SQL data in admanage.php. An attacker could use this vulnerability to send malicious SQL commands...

CVE-2021-46437

An issue was discovered in ZZCMS 2021. There is a cross-site scripting XSS vulnerability in admanage.php...

CVE-2021-46436

An issue was discovered in ZZCMS 2021. There is a SQL injection vulnerability in admanage.php...

CVE-2021-46437

An issue was discovered in ZZCMS 2021. There is a cross-site scripting XSS vulnerability in admanage.php...

CVE-2021-46436

An issue was discovered in ZZCMS 2021. There is a SQL injection vulnerability in admanage.php...

CVE-2021-46437

An issue was discovered in ZZCMS 2021. There is a cross-site scripting XSS vulnerability in admanage.php...

CVE-2021-46436

An issue was discovered in ZZCMS 2021. There is a SQL injection vulnerability in admanage.php...

Sql injection

An issue was discovered in ZZCMS 2021. There is a SQL injection vulnerability in admanage.php...

Cross site scripting

An issue was discovered in ZZCMS 2021. There is a cross-site scripting XSS vulnerability in admanage.php...

CVE-2021-46437

CVE-2021-46437 refers to a cross-site scripting (XSS) vulnerability in ZZCMS 2021, originating from ad_manage.php. The issue stems from lack of proper restriction/filtering of user-supplied parameters, enabling client-side code execution. Multiple connected sources (CNVD-2022-71404, CNVD/EUVD/NVD...

CVE-2021-46437

An issue was discovered in ZZCMS 2021. There is a cross-site scripting XSS vulnerability in admanage.php...

CVE-2021-46436

An issue was discovered in ZZCMS 2021. There is a SQL injection vulnerability in admanage.php...

CVE-2021-46436

ZZCMS 2021 contains a SQL injection in ad_manage.php due to insufficient input filtering. Root cause: unsanitized SQL data enables manipulation of queries; impact could include data access/modification. Affected: ZZCMS 2021 (specific versions not disclosed in the provided documents). Remediation/...

CVE-2021-46437: Improper Neutralization of Input During Web Page Generation

An issue was discovered in ZZCMS 2021. There is a cross-site scripting XSS vulnerability in admanage.php...

CVE-2021-46436: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in ZZCMS 2021. There is a SQL injection vulnerability in admanage.php...

ZZCMS SQL注入漏洞

ZZCMS is a content management system CMS from the Zzcms team in China. zzCMS2021 is vulnerable to SQL injection, which stems from a lack of filtering of SQL data in admanage.php. An attacker could use this vulnerability to send malicious SQL commands...

Unauthorized Access Vulnerability in zzcms 2021

zzcms is an enterprise website builder. An unauthorized access vulnerability exists in zzcms 2021, which can be exploited by attackers to obtain sensitive information...

zzcms authorization problem vulnerability

ZZCMS is a content management system CMS from the Zzcms team in China. zzcms suffers from a security vulnerability that stems from an incorrect access control vulnerability in zzcms 8.2, which could be exploited by attackers to allow malicious users to bypass authentication by changing the userna...