CVE-2018-18784

An issue was discovered in zzcms 8.3. SQL Injection exists in admin/tagmanage.php via the tabletag parameter. This needs an admin user login...

Sql injection

An issue was discovered in zzcms 8.3. SQL Injection exists in ajax/zs.php via a pxzs cookie...

Sql injection

An issue was discovered in zzcms 8.3. SQL Injection exists in zs/search.php via a pxzs cookie...

Sql injection

An issue was discovered in zzcms 8.3. SQL Injection exists in admin/classmanage.php via the tablename parameter. This needs an admin user login...

Sql injection

An issue was discovered in zzcms 8.3. SQL Injection exists in zt/top.php via a Host HTTP header to zt/news.php...

Sql injection

An issue was discovered in zzcms 8.3. SQL Injection exists in zs/zs.php via a pxzs cookie...

Sql injection

An issue was discovered in zzcms 8.3. SQL Injection exists in zs/subzs.php with a zzcmscpid cookie to zs/search.php...

Sql injection

An issue was discovered in zzcms 8.3. SQL Injection exists in admin/specialadd.php via a zxbigclassid cookie. This needs an admin user login...

Sql injection

An issue was discovered in zzcms 8.3. SQL Injection exists in admin/tagmanage.php via the tabletag parameter. This needs an admin user login...

Sql injection

An issue was discovered in zzcms 8.3. SQL Injection exists in zs/zslist.php via a pxzs cookie...

CVE-2018-18791

CVE-2018-18791 affects ZZCMS 8.3, where a SQL injection vulnerability exists in zs/search.php via the pxzs cookie. The root cause is improper handling of the cookie data leading to database information exposure. The issue is documented with concrete details across multiple sources (NVD, CNVD) ind...

CVE-2018-18785

An issue was discovered in zzcms 8.3. SQL Injection exists in zs/subzs.php with a zzcmscpid cookie to zs/search.php...

CVE-2018-18785

CVE-2018-18785 affects ZZCMS 8.3. An SQL injection exists in zs/subzs.php exploited via a zzcmscpid cookie to zs/search.php. The issue impacts confidentiality, integrity, and availability (per CVSS3: 9.8; network, no user interaction). Publicly provided details describe the vulnerable component a...

CVE-2018-18784

CVE-2018-18784 affects ZZCMS v8.3. The SQL injection exists in admin/tagmanage.php via the tabletag parameter and requires an admin login. CNVD notes a remote attacker could exploit this to obtain the MySQL current user name. Modes confirm concrete details: affected software (ZZCMS 8.3), vulnerab...

CVE-2018-18790

CVE-2018-18790 affects ZZCMS 8.3. An SQL Injection exists in admin/special_add.php exploitable via the zxbigclassid cookie (admin login required). The issue can lead to partial disclosure/integrity/availability impact with high severity per CVSSv3 (HIGH for confidentiality, integrity, availabilit...

CVE-2018-18789

The CVE-2018-18789 entry affects ZZCMS v8.3, where SQL injection exists in zt/top.php via a crafted Host HTTP header to zt/news.php. Connected sources (CNVD-2018-26016) state that this allows a remote attacker to obtain the current MySQL user, aligning with the NVD CVSS vectors (high impact acros...

CVE-2018-18787

CVE-2018-18787 concerns zzcms version 8.3, with SQL injection in the zs/zs.php handler triggered via a pxzs cookie. The root cause is improper input handling leading to SQL injection, according to the NVD entry. The available references identify the vulnerability class and affected component, but...

CVE-2018-18788

An issue was discovered in zzcms 8.3. SQL Injection exists in admin/classmanage.php via the tablename parameter. This needs an admin user login...

CVE-2018-18786

CVE-2018-18786 affects ZZCMS 8.3 with a SQL injection in ajax/zs.php exploitable via a pxzs cookie. Root cause: insufficient input validation leading to injection. Impact noted as high/critical across confidentiality, integrity, and availability; CNVD reports attacker can obtain the current MySQL...

CVE-2018-18792

The CVE-2018-18792 issue affects ZZCMS v8.3, with a SQL Injection in zs/zs_list.php exploitable via the pxzs cookie. The root cause is improper handling of input in that endpoint, enabling an attacker to read data from the MySQL user context. Public references in the connected records confirm the...