ZZZCMS zzzphp SQL injection vulnerability

ZZZCMS zzzphp is a content management system CMS. A security vulnerability exists in ZZZCMS zzzphp version 1.7.1, which allows remote attackers to exploit the vulnerability to execute arbitrary code...

CVE-2020-18717

SQL Injection in ZZZCMS zzzphp 1.7.1 allows remote attackers to execute arbitrary code due to a lack of parameter filtering in inc/zzztemplate.php...

CVE-2020-18717

The CVE-2020-18717 entry concerns ZZZCMS zzzphp 1.7.1, where a SQL injection due to lack of parameter filtering in inc/zzz_template.php allows remote code execution. Public sources classify the impact as high/critical (NVD CVSS v3.1: 9.8; v2: 7.5). The affected component is the zzz_template.php p...

PT-2021-10224

Name of the Vulnerable Software and Affected Versions: ZZZCMS zzzphp version 1.7.1 Description: The issue allows remote attackers to execute arbitrary code due to a lack of parameter filtering in inc/zzz template.php. This enables attackers to inject SQL code, potentially leading to unauthorized...

CVE-2020-18717: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in ZZZCMS zzzphp 1.7.1 allows remote attackers to execute arbitrary code due to a lack of parameter filtering in inc/zzztemplate.php...

zzzphp Eval Injection Vulnerability

zzphp is an open source free website building system. An Eval injection vulnerability exists in the parserCommom method of the ParserTemplate class in zzzztemplate.php in zzzphp 1.7.2. A remote attacker can exploit this vulnerability to execute arbitrary commands...

CVE-2020-20298

Eval injection vulnerability in the parserCommom method in the ParserTemplate class in zzztemplate.php in zzzphp 1.7.2 allows remote attackers to execute arbitrary commands...

CVE-2020-20298

Eval injection vulnerability in the parserCommom method in the ParserTemplate class in zzztemplate.php in zzzphp 1.7.2 allows remote attackers to execute arbitrary commands...

CVE-2020-20298

CVE-2020-20298 affects zzzphp 1.7.2, specifically the zzz_template.php file within the ParserTemplate class. The vulnerability is described as an eval injection in the parserCommom method, enabling remote attackers to execute arbitrary commands. The connected documents provide this exact descript...

ZZZCMS zzzphp injection vulnerability

zzphp is an open source free website building system. An Eval injection vulnerability exists in the parserCommom method of the ParserTemplate class in zzzztemplate.php in zzzphp 1.7.2. A remote attacker can exploit this vulnerability to execute arbitrary commands...

PT-2020-15254

Name of the Vulnerable Software and Affected Versions zzzphp version 1.7.2 Description The issue is related to an eval injection vulnerability in the parserCommom method within the ParserTemplate class in zzz template.php. This vulnerability allows remote attackers to execute arbitrary commands...

CVE-2020-20298: Improper Control of Generation of Code

Eval injection vulnerability in the parserCommom method in the ParserTemplate class in zzztemplate.php in zzzphp 1.7.2 allows remote attackers to execute arbitrary commands...

SQL injection vulnerability exists in zzzzphp (CNVD-2020-67552)

zzcms is a free website builder developed in asp language. There is a SQL injection vulnerability in zzzphp, which can be exploited by attackers to obtain sensitive database information...

Logic Flaw Vulnerability in zzzphp V1.7.5

zzphp is a free website builder developed in PHP language. A logic flaw vulnerability exists in zzzphp V1.7.5, which can be exploited by attackers to bypass CAPTCHA validation and gain access to sensitive information on a website...

SQL Injection Vulnerability in zzzphp version 1.7.5

zzphp is a content management system CMS. A SQL injection vulnerability exists in zzzphp version 1.7.5, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in zzzphp 1.7.5

zzphp is a content management system CMS. A SQL injection vulnerability exists in zzzphp 1.7.5, which can be exploited by attackers to obtain sensitive information from the database...

zzzphp v1.7.5 Command Execution Vulnerability in Backend

zzphp is a content management system CMS. A command execution vulnerability exists in the backend of zzzphp v1.7.5, which can be exploited by attackers to execute malicious code...

SQL injection vulnerability in the b*** parameter of the zzzphp sa***.php page

zzphp is a PHP and MYSQL based CMS, free open source building system. zzzphp sa.php page b parameters exist SQL injection vulnerability, an attacker can exploit the vulnerability to obtain database sensitive information...

ZZZphp sa***.php page li*** parameter has SQL injection vulnerability

ZZZphp is a PHP and MYSQL based on free open source website building system . ZZZphp sa.php page li parameter SQL injection vulnerability, an attacker can use the vulnerability to obtain database sensitive information...

SQL injection vulnerability in zzzphp sa***.php page

zzphp is a free website builder developed in PHP language. A SQL injection vulnerability exists in the zzzphp sa.php page, which can be exploited by attackers to obtain sensitive information...