Show filters
99 Total Results
Displaying 21-30 of 99
Sort by:
Attacker Value
Unknown
CVE-2023-36162
Disclosure Date: July 03, 2023 (last updated October 08, 2023)
Cross Site Request Forgery vulnerability in ZZCMS v.2023 and earlier allows a remote attacker to gain privileges via the add function in adminlist.php.
0
Attacker Value
Unknown
CVE-2022-44361
Disclosure Date: December 07, 2022 (last updated October 08, 2023)
An issue was discovered in ZZCMS 2022. There is a cross-site scripting (XSS) vulnerability in admin/ad_list.php.
0
Attacker Value
Unknown
CVE-2022-40447
Disclosure Date: September 22, 2022 (last updated October 08, 2023)
ZZCMS 2022 was discovered to contain a SQL injection vulnerability via the keyword parameter at /admin/baojia_list.php.
0
Attacker Value
Unknown
CVE-2022-40446
Disclosure Date: September 22, 2022 (last updated October 08, 2023)
ZZCMS 2022 was discovered to contain a SQL injection vulnerability via the component /admin/sendmailto.php?tomail=&groupid=.
0
Attacker Value
Unknown
CVE-2022-40444
Disclosure Date: September 22, 2022 (last updated October 08, 2023)
ZZCMS 2022 was discovered to contain a full path disclosure vulnerability via the page /admin/index.PHP? _server.
0
Attacker Value
Unknown
CVE-2022-40443
Disclosure Date: September 22, 2022 (last updated October 08, 2023)
An absolute path traversal vulnerability in ZZCMS 2022 allows attackers to obtain sensitive information via a crafted GET request sent to /one/siteinfo.php.
0
Attacker Value
Unknown
CVE-2019-12359
Disclosure Date: June 17, 2022 (last updated October 07, 2023)
An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin/ztliuyan_sendmail.php (when the attacker has admin authority) via the id parameter.
0
Attacker Value
Unknown
CVE-2019-12358
Disclosure Date: June 17, 2022 (last updated October 07, 2023)
An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /dl/dl_sendsms.php (when the attacker has dls_print authority) via a dlid cookie.
0
Attacker Value
Unknown
CVE-2019-12357
Disclosure Date: June 17, 2022 (last updated October 07, 2023)
An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin/deluser.php (when the attacker has admin authority) via the id parameter.
0
Attacker Value
Unknown
CVE-2019-12356
Disclosure Date: June 17, 2022 (last updated October 07, 2023)
An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /user/dls_download.php (when the attacker has dls_download authority) via the id parameter.
0
