986 matches found
CVE-2018-18785
An issue was discovered in zzcms 8.3. SQL Injection exists in zs/subzs.php with a zzcmscpid cookie to zs/search.php...
CVE-2018-18785
An issue was discovered in zzcms 8.3. SQL Injection exists in zs/subzs.php with a zzcmscpid cookie to zs/search.php...
CVE-2018-18784
An issue was discovered in zzcms 8.3. SQL Injection exists in admin/tagmanage.php via the tabletag parameter. This needs an admin user login...
CVE-2018-18784
An issue was discovered in zzcms 8.3. SQL Injection exists in admin/tagmanage.php via the tabletag parameter. This needs an admin user login...
Sql injection
An issue was discovered in zzcms 8.3. SQL Injection exists in zs/search.php via a pxzs cookie...
Sql injection
An issue was discovered in zzcms 8.3. SQL Injection exists in ajax/zs.php via a pxzs cookie...
Sql injection
An issue was discovered in zzcms 8.3. SQL Injection exists in zt/top.php via a Host HTTP header to zt/news.php...
Sql injection
An issue was discovered in zzcms 8.3. SQL Injection exists in admin/classmanage.php via the tablename parameter. This needs an admin user login...
Sql injection
An issue was discovered in zzcms 8.3. SQL Injection exists in zs/zs.php via a pxzs cookie...
Sql injection
An issue was discovered in zzcms 8.3. SQL Injection exists in zs/subzs.php with a zzcmscpid cookie to zs/search.php...
Sql injection
An issue was discovered in zzcms 8.3. SQL Injection exists in admin/specialadd.php via a zxbigclassid cookie. This needs an admin user login...
Sql injection
An issue was discovered in zzcms 8.3. SQL Injection exists in zs/zslist.php via a pxzs cookie...
Sql injection
An issue was discovered in zzcms 8.3. SQL Injection exists in admin/tagmanage.php via the tabletag parameter. This needs an admin user login...
CVE-2018-18785
An issue was discovered in zzcms 8.3. SQL Injection exists in zs/subzs.php with a zzcmscpid cookie to zs/search.php...
CVE-2018-18791
CVE-2018-18791 affects ZZCMS 8.3, where a SQL injection vulnerability exists in zs/search.php via the pxzs cookie. The root cause is improper handling of the cookie data leading to database information exposure. The issue is documented with concrete details across multiple sources (NVD, CNVD) ind...
CVE-2018-18785
CVE-2018-18785 affects ZZCMS 8.3. An SQL injection exists in zs/subzs.php exploited via a zzcmscpid cookie to zs/search.php. The issue impacts confidentiality, integrity, and availability (per CVSS3: 9.8; network, no user interaction). Publicly provided details describe the vulnerable component a...
CVE-2018-18784
CVE-2018-18784 affects ZZCMS v8.3. The SQL injection exists in admin/tagmanage.php via the tabletag parameter and requires an admin login. CNVD notes a remote attacker could exploit this to obtain the MySQL current user name. Modes confirm concrete details: affected software (ZZCMS 8.3), vulnerab...
CVE-2018-18788
An issue was discovered in zzcms 8.3. SQL Injection exists in admin/classmanage.php via the tablename parameter. This needs an admin user login...