1090 matches found
Sql injection
zzcms version 8.3 and earlier contains a SQL Injection vulnerability in zt/top.php line 5 that can result in could be attacked by sql injection in zzcms in nginx. This attack appear to be exploitable via running zzcms in nginx...
CVE-2018-1000653
zzcms version 8.3 and earlier contains a SQL Injection vulnerability in zt/top.php line 5 that can result in could be attacked by sql injection in zzcms in nginx. This attack appear to be exploitable via running zzcms in nginx...
CVE-2018-1000653
CVE-2018-1000653 affects ZZCMS 8.3 and earlier. A SQL injection vulnerability exists in the zt/top.php file (line 5). The Red Hat and CNVD/CVE records and related sources indicate the issue can be triggered when ZZCMS is run under nginx, allowing an attacker to influence SQL commands. The public ...
Arbitrary file deletion vulnerability in admin/ad_user_modify.php in zzcms product version 8.3
ZZCMS Product Edition is a CMS Content Management System for quickly building investment-oriented websites. An arbitrary file deletion vulnerability exists in admin/adusermodify.php in ZZCMS Product Edition 8.3. An attacker can exploit the vulnerability to delete arbitrary files...
CVE-2018-1000653: Improper Neutralization of Special Elements used in an SQL Command
zzcms version 8.3 and earlier contains a SQL Injection vulnerability in zt/top.php line 5 that can result in could be attacked by sql injection in zzcms in nginx. This attack appear to be exploitable via running zzcms in nginx...
ZZCMS V8.2 has arbitrary directory deletion vulnerability
ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. ZZCMS V8.2 has an arbitrary directory deletion vulnerability, which can be exploited by attackers to delete arbitrary files...
ZZCMS SQL Injection Vulnerability (CNVD-2018-15398)
ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A SQL injection vulnerability exists in the dl/dlsendmail.php file in ZZCMS version 8.3. A remote attacker can exploit this vulnerability to obtain the administrator password with the help of the 'sql' paramet...
Sql injection
dl/dlsendmail.php in zzcms 8.3 has SQL Injection via the sql parameter...
CVE-2018-14961
dl/dlsendmail.php in zzcms 8.3 has SQL Injection via the sql parameter...
CVE-2018-14963
zzcms 8.3 has CSRF via the admin/adminadd.php?action=add URI...
Cross site request forgery (csrf)
zzcms 8.3 has CSRF via the admin/adminadd.php?action=add URI...
Cross site scripting
zzcms 8.3 has stored XSS related to the content variable in user/manage.php and zt/show.php...
CVE-2018-14962
zzcms 8.3 has stored XSS related to the content variable in user/manage.php and zt/show.php...
CVE-2018-14963
zzcms 8.3 has CSRF via the admin/adminadd.php?action=add URI...
CVE-2018-14962
zzcms 8.3 has stored XSS related to the content variable in user/manage.php and zt/show.php...
CVE-2018-14961
dl/dlsendmail.php in zzcms 8.3 has SQL Injection via the sql parameter...
CVE-2018-14961
dl/dlsendmail.php in zzcms 8.3 has SQL Injection via the sql parameter...
CVE-2018-14962
zzcms 8.3 has stored XSS related to the content variable in user/manage.php and zt/show.php...
CVE-2018-14962
The CVE-2018-14962 entry concerns zzcms 8.3 with a stored XSS vulnerability affecting the content variable in user/manage.php and zt/show.php. Affected component/file paths are specified, and the underlying issue is a stored XSS condition, enabling injection via the content field. The available d...