Zzcms vulnerabilities

Products

• Zzcms 106
• Zzmcms 2

Newest

• zzcms ZZCMS Backend Website Settings siteconfig.php stripfxg code injection CVE-2025-14837 5.1 MediumDecember 17, 2025
• zzcms ZZCMS User Data Storage user_save.php cleartext storage in file CVE-2025-14836 5.1 MediumDecember 17, 2025
• zzcms ZZCMS wangkan_list.php sql injection CVE-2025-13171 5.3 MediumNovember 14, 2025
• zzcms ZZCMS URL register_nodb.php cross site scripting CVE-2025-1949 5.3 MediumMarch 4, 2025
• zzcms A SQL injection vulnerability exists in the front-end of the website in ZZCMS <= 2023, which can... CVE-2025-22957 9.8 CriticalJanuary 31, 2025
• zzcms ZZCMS index.php sql injection CVE-2025-0565 6.9 MediumJanuary 19, 2025
• zzcms ZZCMS 2023 was discovered to contain a SQL injection vulnerability in /q/show.php. CVE-2024-52724 9.8 CriticalDecember 2, 2024
• zzcms ZZCMS Keyword Filtering ad_list.php sql injection CVE-2024-11242 5.1 MediumNovember 15, 2024
• zzcms ZZCMS msg.php cross site scripting CVE-2024-11130 5.1 MediumNovember 12, 2024
• zzcms ZZCMS functions.php Ebak_SetGotoPak unrestricted upload CVE-2024-10293 5.3 MediumOctober 23, 2024
• zzcms ZZCMS ChangeTable.php unrestricted upload CVE-2024-10292 5.3 MediumOctober 23, 2024
• zzcms ZZCMS phome.php Ebak_DotranExecutSQL sql injection CVE-2024-10291 5.3 MediumOctober 23, 2024
• zzcms ZZCMS inc.php information disclosure CVE-2024-10290 6.9 MediumOctober 23, 2024
• zzcms ZZCMS 2023 contains a vulnerability in the captcha reuse logic located in /inc/function.php. The... CVE-2024-44821 5.3 MediumSeptember 4, 2024
• zzcms A sensitive information disclosure vulnerability exists in ZZCMS v.2023 and before within the... CVE-2024-44820 6.1 MediumSeptember 4, 2024
• zzcms Cross Site Scripting vulnerability in ZZCMS v.2023 and before allows a remote attacker to obtain... CVE-2024-44819 6.1 MediumSeptember 4, 2024
• zzcms Cross Site Scripting vulnerability in ZZCMS v.2023 and before allows a remote attacker to obtain... CVE-2024-44818 5.4 MediumSeptember 4, 2024
• zzcms SQL Injection vulnerability in ZZCMS v.2023 and before allows a remote attacker to obtain... CVE-2024-44817 8.8 HighSeptember 4, 2024
• zzcms ZZCMS class.php path traversal CVE-2024-7927 6.9 MediumAugust 19, 2024
• zzcms ZZCMS about_edit.php path traversal CVE-2024-7926 6.9 MediumAugust 19, 2024
• zzcms ZZCMS eginfo.php information disclosure CVE-2024-7925 5.3 MediumAugust 19, 2024
• zzcms ZZCMS list.php path traversal CVE-2024-7924 6.9 MediumAugust 19, 2024
• zzcms An arbitrary file deletion vulnerability exists in the admin/del.php file at line 62 in ZZCMS... CVE-2024-43011 4.9 MediumAugust 16, 2024
• zzcms A reflected cross-site scripting (XSS) vulnerability exists in user/login.php at line 24 in ZZCMS... CVE-2024-43009 4.7 MediumAugust 16, 2024
• zzcms, zzcms zzmcms +1 more A stored cross-site scripting (XSS) vulnerability exists in ZZCMS2023 in the ask/show.php file at... CVE-2024-43006 5.4 MediumAugust 16, 2024
• zzcms A reflected cross-site scripting (XSS) vulnerability in the component dl_liuyan_save.php of ZZCMS... CVE-2024-43005 4.7 MediumAugust 16, 2024
• zzcms ZZCMS 2023 has a file upload vulnerability in 3/E_bak5.1/upload/index.php, allowing attackers to... CVE-2023-50104 9.8 CriticalDecember 28, 2023
• zzcms An issue in zzCMS v.2023 allows a remote attacker to execute arbitrary code and obtain sensitive... CVE-2023-42398 9.8 CriticalSeptember 15, 2023
• zzcms Cross Site Request Forgery vulnerability in ZZCMS v.2023 alows a remote attacker to gain... CVE-2023-36162 8.8 HighJuly 3, 2023
• zzcms An issue was discovered in ZZCMS 2022. There is a cross-site scripting (XSS) vulnerability in... CVE-2022-44361 5.4 MediumDecember 7, 2022
• zzcms ZZCMS 2022 was discovered to contain a SQL injection vulnerability via the keyword parameter at ... CVE-2022-40447 7.2 HighSeptember 22, 2022
• zzcms ZZCMS 2022 was discovered to contain a SQL injection vulnerability via the component /admin... CVE-2022-40446 7.2 HighSeptember 22, 2022
• zzcms ZZCMS 2022 was discovered to contain a full path disclosure vulnerability via the page /admin... CVE-2022-40444 5.3 MediumSeptember 22, 2022
• zzcms An absolute path traversal vulnerability in ZZCMS 2022 allows attackers to obtain sensitive... CVE-2022-40443 5.3 MediumSeptember 22, 2022
• zzcms An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /dl/dl_sendmail... CVE-2019-12352 8.8 HighJune 17, 2022
• zzcms An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin... CVE-2019-12353 7.2 HighJune 17, 2022
• zzcms An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin/showbad... CVE-2019-12354 7.2 HighJune 17, 2022
• zzcms An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /user/dls_print... CVE-2019-12355 8.8 HighJune 17, 2022
• zzcms An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /user... CVE-2019-12356 8.8 HighJune 17, 2022
• zzcms An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin/deluser... CVE-2019-12357 7.2 HighJune 17, 2022
• zzcms An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /dl/dl_sendsms... CVE-2019-12358 8.8 HighJune 17, 2022
• zzcms An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin... CVE-2019-12359 7.2 HighJune 17, 2022
• zzcms An issue was discovered in zzcms 2019. SQL Injection exists in dl/dl_download.php via an id... CVE-2019-12350 9.8 CriticalJune 2, 2022
• zzcms An issue was discovered in zzcms 2019. SQL Injection exists in /admin/dl_sendsms.php via the id... CVE-2019-12349 9.8 CriticalJune 2, 2022
• zzcms An issue was discovered in zzcms 2019. SQL Injection exists in dl/dl_print.php via an id... CVE-2019-12351 9.8 CriticalJune 2, 2022
• zzcms An issue was discovered in ZZCMS 2021. There is a cross-site scripting (XSS) vulnerability in... CVE-2021-46437 4.8 MediumApril 8, 2022
• zzcms An issue was discovered in ZZCMS 2021. There is a SQL injection vulnerability in ad_manage.php. CVE-2021-46436 7.2 HighApril 8, 2022
• zzcms An Incorrect Access Control vulnerability exists in zzcms 8.2, which lets a malicious user bypass... CVE-2021-45347 7.5 HighFebruary 14, 2022
• zzcms Directory Traversal vulnerability exists in ZZCMS 2021 via the skin parameter in 1) index.php, 2)... CVE-2021-45286 5.3 MediumFebruary 9, 2022
• zzcms A SQL Injection vulnerability exists in ZZCMS 2021 via the askbigclassid parameter in /admin/ask... CVE-2021-42945 9.8 CriticalDecember 15, 2021
• Show olderLoading…