1090 matches found
CVE-2021-42945
CVE-2021-42945 is a confirmed SQL Injection in ZZCMS 2021, exploitable via the askbigclassid parameter in /admin/ask.php. The vulnerability stems from lack of input validation on external SQL statements, allowing an attacker to execute arbitrary SQL commands and potentially exfiltrate sensitive d...
CVE-2021-42945: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection vulnerability exists in ZZCMS 2021 via the askbigclassid parameter in /admin/ask.php...
zzcms cross-site scripting vulnerability
ZZCMS is a content management system CMS by Zzcms team in China. A cross-site scripting vulnerability exists in zzcms, which stems from a lack of effective filtering and escaping of modified user actions in ad.php in the software. No details of the vulnerability are available at this time...
CVE-2020-19042
Cross Site Scripting XSS vulnerability exists in zzcms 2019 XSS via a modify action in user/adv.php...
CVE-2020-19042
Cross Site Scripting XSS vulnerability exists in zzcms 2019 XSS via a modify action in user/adv.php...
Cross site scripting
Cross Site Scripting XSS vulnerability exists in zzcms 2019 XSS via a modify action in user/adv.php...
CVE-2020-19042
Cross Site Scripting XSS vulnerability exists in zzcms 2019 XSS via a modify action in user/adv.php...
CVE-2020-19042
CVE-2020-19042 affects zzcms (2019) XSS via a modify action in user/adv.php. Root cause cited across sources as insufficient input filtering/escaping for modified user actions (ad.php/adv.php). Impact: cross-site scripting vulnerability; no exploitation details or official patch information provi...
CVE-2020-19042: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability exists in zzcms 2019 XSS via a modify action in user/adv.php...
zzcms 跨站脚本漏洞
ZZCMS is a content management system CMS by Zzcms team in China. A cross-site scripting vulnerability exists in zzcms, which stems from a lack of effective filtering and escaping of modified user actions in ad.php in the software. No details of the vulnerability are available at this time...
ZZCMS SQL Injection Vulnerability (CNVD-2021-103084)
ZZCMS is a content management system CMS from the Zzcms team in China. A SQL injection vulnerability exists in ZZCMS, which stems from a lack of validation of externally entered SQL statements when registering regular users in dl/dldownload.php. An attacker could use this vulnerability to execute...
ZZCMS dl_sendmail.php SQL Injection Vulnerability
ZZCMS is a content management system CMS from the Zzcms team in China. ZZCMS is vulnerable to SQL injection, which stems from a missing validation of externally entered SQL statements in the id parameter of admin/dlsendmail.php. An attacker could use this vulnerability to execute illegal SQL...
ZZCMS Access Control Error Vulnerability
ZZCMS is a content management system CMS from the Zzcms team in China. ZZCMS suffers from an access control error vulnerability that stems from an incorrect access control vulnerability in zzcms via admin.php, which can be exploited by an attacker to directly access the administrator console afte...
zzcms SQL Injection Vulnerability (CNVD-2021-99763)
ZZCMS is a content management system CMS from the Zzcms team in China. zzcms is vulnerable to SQL injection, which allows an attacker to use the id parameter in admin/bad.php with a lack of validation for external input SQL statements. An attacker can use the vulnerability to execute illegal SQL...
ZZCMS SQL Injection Vulnerability (CNVD-2021-99769)
zzcms is a multifunctional cms system that integrates front-end pages, custom templates, payments, etc., using a b/s structure of php mysql. The mvc model is used to facilitate quick system build. zzcms has a SQL vulnerability in versions 8.2 and 8.3, which is related to the affected version not...
CVE-2021-43703
An Incorrect Access Control vulnerability exists in zzcms less than or equal to 2019 via admin.php. After disabling JavaScript, you can directly access the administrator console...
CVE-2021-43703
An Incorrect Access Control vulnerability exists in zzcms less than or equal to 2019 via admin.php. After disabling JavaScript, you can directly access the administrator console...
CVE-2021-40282
An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, abd 2021 in dl/dldownload.php. when registering ordinary users...
