1090 matches found
CVE-2018-18786
An issue was discovered in zzcms 8.3. SQL Injection exists in ajax/zs.php via a pxzs cookie...
CVE-2018-18787
An issue was discovered in zzcms 8.3. SQL Injection exists in zs/zs.php via a pxzs cookie...
CVE-2018-18788
CVE-2018-18788 affects ZZCMS v8.3, where SQL injection exists in the admin/classmanage.php file via the unvalidated tablename parameter. The vulnerability requires an admin user login and can allow an attacker to read MySQL data (e.g., current user name) as described in CNVD/NVD references. Affec...
CVE-2018-18792
An issue was discovered in zzcms 8.3. SQL Injection exists in zs/zslist.php via a pxzs cookie...
CVE-2018-18790
An issue was discovered in zzcms 8.3. SQL Injection exists in admin/specialadd.php via a zxbigclassid cookie. This needs an admin user login...
CVE-2018-18791
An issue was discovered in zzcms 8.3. SQL Injection exists in zs/search.php via a pxzs cookie...
CVE-2018-18784
An issue was discovered in zzcms 8.3. SQL Injection exists in admin/tagmanage.php via the tabletag parameter. This needs an admin user login...
CVE-2018-18789
An issue was discovered in zzcms 8.3. SQL Injection exists in zt/top.php via a Host HTTP header to zt/news.php...
CVE-2018-18784: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in zzcms 8.3. SQL Injection exists in admin/tagmanage.php via the tabletag parameter. This needs an admin user login...
CVE-2018-18791: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in zzcms 8.3. SQL Injection exists in zs/search.php via a pxzs cookie...
CVE-2018-18792: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in zzcms 8.3. SQL Injection exists in zs/zslist.php via a pxzs cookie...
CVE-2018-18787: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in zzcms 8.3. SQL Injection exists in zs/zs.php via a pxzs cookie...
zzcms SQL Injection Vulnerability (CNVD-2018-26015)
ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A SQL injection vulnerability exists in the admin/classmanage.php file in ZZCMS version 8.3. A remote attacker can exploit this vulnerability to obtain the current user name of mysql with the help of the...
CVE-2018-18789: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in zzcms 8.3. SQL Injection exists in zt/top.php via a Host HTTP header to zt/news.php...
zzcms SQL Injection Vulnerability (CNVD-2018-26020)
ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A SQL injection vulnerability exists in the admin/tagmanage.php file in ZZCMS version 8.3. A remote attacker can exploit this vulnerability to obtain the current user name of mysql with the help of the...
zzcms SQL Injection Vulnerability (CNVD-2018-26018)
ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A SQL injection vulnerability exists in the zs/search.php file in ZZCMS version 8.3. A remote attacker can exploit this vulnerability to obtain the current database name of mysql with the help of pxzs cookie...
CVE-2018-18790: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in zzcms 8.3. SQL Injection exists in admin/specialadd.php via a zxbigclassid cookie. This needs an admin user login...
CVE-2018-18786: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in zzcms 8.3. SQL Injection exists in ajax/zs.php via a pxzs cookie...
CVE-2018-18788: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in zzcms 8.3. SQL Injection exists in admin/classmanage.php via the tablename parameter. This needs an admin user login...
zzcms SQL Injection Vulnerability (CNVD-2018-26016)
ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A SQL injection vulnerability exists in the zt/top.php file in ZZCMS version 8.3. A remote attacker can exploit this vulnerability to obtain the current user name of mysql...