Lucene search
+L

1090 matches found

NVD
NVD
•added 2022/02/14 7:15 p.m.•24 views

CVE-2021-45347

An Incorrect Access Control vulnerability exists in zzcms 8.2, which lets a malicious user bypass authentication by changing the user name in the cookie to use any password...

7.5CVSS0.01166EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/02/14 7:15 p.m.•7 views

CVE-2021-45347

An Incorrect Access Control vulnerability exists in zzcms 8.2, which lets a malicious user bypass authentication by changing the user name in the cookie to use any password...

7.5CVSS5.9AI score0.01166EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2022/02/14 6:35 p.m.•30 views

CVE-2021-45347

An Incorrect Access Control vulnerability exists in zzcms 8.2, which lets a malicious user bypass authentication by changing the user name in the cookie to use any password...

7.8AI score0.01166EPSS
SaveExploits1References1
CVE
CVE
•added 2022/02/14 6:35 p.m.•90 views

CVE-2021-45347

CVE-2021-45347 affects zzcms 8.2. It is an Incorrect Access Control vulnerability allowing an unauthenticated attacker to bypass login by changing the username in the cookie to use any password. The connected sources consistently describe this flaw as an authentication bypass in zzcms 8.2. No spe...

7.5CVSS7.6AI score0.01166EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2022/02/14 12:00 a.m.•11 views

zzcms 授权问题漏洞

ZZCMS is a content management system CMS from the Zzcms team in China. zzcms suffers from a security vulnerability that stems from an incorrect access control vulnerability in zzcms 8.2, which could be exploited by attackers to allow malicious users to bypass authentication by changing the userna...

7.5CVSS5.7AI score0.01166EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/14 12:00 a.m.•6 views

CVE-2021-45347: Improper Authentication

An Incorrect Access Control vulnerability exists in zzcms 8.2, which lets a malicious user bypass authentication by changing the user name in the cookie to use any password...

7.5CVSS7.2AI score0.01166EPSS
SaveExploits1References2
NVD
NVD
•added 2022/02/09 8:15 p.m.•27 views

CVE-2021-45286

Directory Traversal vulnerability exists in ZZCMS 2021 via the skin parameter in 1 index.php, 2 bottom.php, and 3 topindex.php...

5.3CVSS0.01656EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/02/09 8:15 p.m.•12 views

CVE-2021-45286

Directory Traversal vulnerability exists in ZZCMS 2021 via the skin parameter in 1 index.php, 2 bottom.php, and 3 topindex.php...

5.3CVSS5.8AI score0.01656EPSS
SaveExploits1References2
OSV
OSV
•added 2022/02/09 8:15 p.m.•12 views

CVE-2021-45286

Directory Traversal vulnerability exists in ZZCMS 2021 via the skin parameter in 1 index.php, 2 bottom.php, and 3 topindex.php...

5.3CVSS6.1AI score0.01656EPSS
SaveExploits1References1
Prion
Prion
•added 2022/02/09 8:15 p.m.•26 views

Directory traversal

Directory Traversal vulnerability exists in ZZCMS 2021 via the skin parameter in 1 index.php, 2 bottom.php, and 3 topindex.php...

5CVSS5.3AI score0.01656EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2022/02/09 7:34 p.m.•104 views

CVE-2021-45286

CVE-2021-45286 : A directory traversal vulnerability affects ZZCMS 2021, exploitable via the skin parameter in 1) index.php, 2) bottom.php, and 3) top_index.php. The issue is rooted in improper input handling that allows accessing paths outside the intended directory. Documented impact centers on...

5.3CVSS5.3AI score0.01656EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2022/02/09 7:34 p.m.•46 views

CVE-2021-45286

Directory Traversal vulnerability exists in ZZCMS 2021 via the skin parameter in 1 index.php, 2 bottom.php, and 3 topindex.php...

5.6AI score0.01656EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2022/02/09 12:00 a.m.•17 views

ZZCMS 路径遍历漏洞

ZZCMS is a content management system CMS from the China Zzcms team. ZZCMS suffers from a path traversal vulnerability that arises from a failure of a networked system or product to properly filter special elements in the path of a resource or file. An attacker can exploit this vulnerability to...

5.3CVSS5.8AI score0.01656EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/09 12:00 a.m.•6 views

CVE-2021-45286: Improper Limitation of a Pathname to a Restricted Directory

Directory Traversal vulnerability exists in ZZCMS 2021 via the skin parameter in 1 index.php, 2 bottom.php, and 3 topindex.php...

5.3CVSS6AI score0.01656EPSS
SaveExploits1References2
CNVD
CNVD
•added 2021/12/19 12:00 a.m.•83 views

ZZCMS SQL Injection Vulnerability (CNVD-2021-101691)

ZZCMS is a content management system CMS from the Zzcms team in China.ZZCMS is vulnerable to SQL injection in 2021, which stems from a lack of validation of external input SQL statements in the askbigclassid parameter of /admin/ask.php in the application. An attacker could use this vulnerability ...

9.8CVSS3.6AI score0.00964EPSS
SaveExploits0References1
OSV
OSV
•added 2021/12/15 7:15 a.m.•17 views

CVE-2021-42945

A SQL Injection vulnerability exists in ZZCMS 2021 via the askbigclassid parameter in /admin/ask.php...

9.8CVSS7.4AI score0.00964EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/12/15 7:15 a.m.•9 views

CVE-2021-42945

A SQL Injection vulnerability exists in ZZCMS 2021 via the askbigclassid parameter in /admin/ask.php...

9.8CVSS7.4AI score0.00964EPSS
SaveExploits0References3
NVD
NVD
•added 2021/12/15 7:15 a.m.•34 views

CVE-2021-42945

A SQL Injection vulnerability exists in ZZCMS 2021 via the askbigclassid parameter in /admin/ask.php...

9.8CVSS0.00964EPSS
SaveExploits0References2
Prion
Prion
•added 2021/12/15 7:15 a.m.•29 views

Sql injection

A SQL Injection vulnerability exists in ZZCMS 2021 via the askbigclassid parameter in /admin/ask.php...

7.5CVSS9.8AI score0.00964EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2021/12/15 6:27 a.m.•45 views

CVE-2021-42945

A SQL Injection vulnerability exists in ZZCMS 2021 via the askbigclassid parameter in /admin/ask.php...

10AI score0.00964EPSS
SaveExploits0References2
Rows per page
Query Builder