SQL injection vulnerability in ZZCMS 8.3 sp***.php file

ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A SQL injection vulnerability exists in the sp.php file of ZZCMS version 8.3. An attacker can exploit the vulnerability to obtain sensitive information from the database...

SQL injection vulnerability in ZZCMS 8.3 se***.php file

ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A SQL injection vulnerability exists in the se.php file of ZZCMS version 8.3. An attacker can exploit the vulnerability to obtain sensitive information from the database...

SQL injection vulnerability in ZZCMS version 8.3 zs***.php file (CNVD-2018-19952)

ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A SQL injection vulnerability exists in the zs.php file of ZZCMS version 8.3. An attacker can exploit the vulnerability to obtain sensitive information from the database...

SQL injection vulnerability in ZZCMS 8.3 ta***.php file

ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A SQL injection vulnerability exists in the ta.php file of ZZCMS version 8.3. An attacker can exploit the vulnerability to obtain sensitive information from the database...

Sql injection

zzcms 8.3 contains a SQL Injection vulnerability in /user/check.php via a Client-Ip HTTP header...

CVE-2018-17136

zzcms 8.3 contains a SQL Injection vulnerability in /user/check.php via a Client-Ip HTTP header...

CVE-2018-17136

zzcms 8.3 contains a SQL Injection vulnerability in /user/check.php via a Client-Ip HTTP header...

CVE-2018-17136

CVE-2018-17136 affects ZZCMS v8.3, with a SQL Injection in /user/check.php exploitable via the Client-Ip HTTP header. Root cause is improper handling of the header leading to SQL command injection. Exploitation details are not provided beyond the architectural description; CVSS metrics indicate a...

CVE-2018-17136

zzcms 8.3 contains a SQL Injection vulnerability in /user/check.php via a Client-Ip HTTP header...

zzcms SQL Injection Vulnerability (CNVD-2018-19742)

ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A SQL injection vulnerability exists in the /user/check.php file in ZZCMS version 8.3. A remote attacker can exploit this vulnerability to execute SQL commands with the help of Client-Ip HTTP packet header...

CVE-2018-17136: Improper Neutralization of Special Elements used in an SQL Command

zzcms 8.3 contains a SQL Injection vulnerability in /user/check.php via a Client-Ip HTTP header...

CVE-2018-16344

An issue was discovered in zzcms 8.3. It allows remote attackers to delete arbitrary files via directory traversal sequences in the flv parameter. This can be leveraged for database access by deleting install.lock...

CVE-2018-16344

An issue was discovered in zzcms 8.3. It allows remote attackers to delete arbitrary files via directory traversal sequences in the flv parameter. This can be leveraged for database access by deleting install.lock...

Directory traversal

An issue was discovered in zzcms 8.3. It allows remote attackers to delete arbitrary files via directory traversal sequences in the flv parameter. This can be leveraged for database access by deleting install.lock...

CVE-2018-16344

CVE-2018-16344 affects the web CMS zzcms 8.3 . The issue allows remote attackers to delete arbitrary files via directory traversal in the flv parameter, which can be leveraged to delete files such as install.lock , potentially enabling database access. The connected documents do not provide explo...

CVE-2018-16344: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in zzcms 8.3. It allows remote attackers to delete arbitrary files via directory traversal sequences in the flv parameter. This can be leveraged for database access by deleting install.lock...

ZZCMS SQL Injection Vulnerability (CNVD-2018-15848)

ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A SQL injection vulnerability exists in line 5 of the zt/top.php file in ZZCMS 8.3 and earlier versions. A remote attacker can exploit this vulnerability by running ZZCMS in nginx to execute arbitrary SQL...

zzcms 8.3 arbitrary file deletion vulnerability deep thinking-vulnerability warning-the black bar safety net

In the analysis of the already existing cve in the process, discovered zzcms 8.3 comparison of the previous version of the function improved, so by the follow-up look, there is no problem, and sure enough found the problem. CMS for file storage implementation Because I myself have done similar cm...

CVE-2018-1000653

zzcms version 8.3 and earlier contains a SQL Injection vulnerability in zt/top.php line 5 that can result in could be attacked by sql injection in zzcms in nginx. This attack appear to be exploitable via running zzcms in nginx...

CVE-2018-1000653

zzcms version 8.3 and earlier contains a SQL Injection vulnerability in zt/top.php line 5 that can result in could be attacked by sql injection in zzcms in nginx. This attack appear to be exploitable via running zzcms in nginx...