Show filters
22 Total Results
Displaying 11-20 of 22
Sort by:
Attacker Value
Unknown
CVE-2019-12350
Disclosure Date: June 02, 2022 (last updated February 23, 2025)
An issue was discovered in zzcms 2019. SQL Injection exists in dl/dl_download.php via an id parameter value with a trailing comma.
0
Attacker Value
Unknown
CVE-2019-12349
Disclosure Date: June 02, 2022 (last updated February 23, 2025)
An issue was discovered in zzcms 2019. SQL Injection exists in /admin/dl_sendsms.php via the id parameter.
0
Attacker Value
Unknown
CVE-2020-19042
Disclosure Date: December 13, 2021 (last updated February 23, 2025)
Cross Site Scripting (XSS) vulnerability exists in zzcms 2019 XSS via a modify action in user/adv.php.
0
Attacker Value
Unknown
CVE-2020-19960
Disclosure Date: October 14, 2021 (last updated February 23, 2025)
A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive data via the dlid parameter in the /dl/dl_sendsms.php page cookie.
0
Attacker Value
Unknown
CVE-2020-19961
Disclosure Date: October 14, 2021 (last updated February 23, 2025)
A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive data via the component subzs.php.
0
Attacker Value
Unknown
CVE-2020-19959
Disclosure Date: October 14, 2021 (last updated February 23, 2025)
A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive data via the dlid parameter in the /dl/dl_sendmail.php page cookie.
0
Attacker Value
Unknown
CVE-2020-19957
Disclosure Date: October 14, 2021 (last updated February 23, 2025)
A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive data via the id parameter on the /dl/dl_print.php page.
0
Attacker Value
Unknown
CVE-2019-12348
Disclosure Date: May 24, 2021 (last updated February 22, 2025)
An issue was discovered in zzcms 2019. SQL Injection exists in user/ztconfig.php via the daohang or img POST parameter.
0
Attacker Value
Unknown
CVE-2020-21342
Disclosure Date: May 13, 2021 (last updated February 22, 2025)
Insecure permissions issue in zzcms 201910 via the reset any user password in /one/getpassword.php.
0
Attacker Value
Unknown
CVE-2020-23426
Disclosure Date: April 08, 2021 (last updated February 22, 2025)
zzcms 201910 contains an access control vulnerability through escalation of privileges in /user/adv.php, which allows an attacker to modify data for further attacks such as CSRF.
0
