Skip to contentZzcms vulnerabilities
Newest
- zzcmsCross Site Scripting (XSS) vulnerability exists in zzcms 2019 XSS via a modify action in user/adv...CVE-2020-190426.1 Medium
- zzcmsAn Incorrect Access Control vulnerability exists in zzcms less than or equal to 2019 via admin...CVE-2021-437039.8 Critical
- zzcmsAn SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, abd 2021 in dl/dl_download.php....CVE-2021-402828.8 High
- zzcmsAn SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, and 2021 in dl/dl_print.php when...CVE-2021-402818.8 High
- zzcmsAn SQL Injection vulnerablitly exits in zzcms 8.2, 8.3, 2020, and 2021 via the id parameter in...CVE-2021-402807.2 High
- zzcmsAn SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, and 2021 via the id parameter in...CVE-2021-402797.2 High
- zzcmsA SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers...CVE-2020-199577.5 High
- zzcmsA SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers...CVE-2020-199597.5 High
- zzcmsA SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers...CVE-2020-199617.5 High
- zzcmsA SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers...CVE-2020-199607.5 High
- zzcmsA remote code execution (RCE) vulnerability in template_user.php of ZZCMS version 2018 allows...CVE-2020-198227.2 High
- zzcmsAn issue was discovered in zzcms2020. There is a XSS vulnerability that can insert and execute JS...CVE-2020-359735.4 Medium
- zzcmsAn issue was discovered in zzcms 2019. SQL Injection exists in user/ztconfig.php via the daohang...CVE-2019-123489.8 Critical
- zzcmsInsecure permissions issue in zzcms 201910 via the reset any user password in /one/getpassword.php.CVE-2020-213427.5 High
- zzcmszzcms 201910 contains an access control vulnerability through escalation of privileges in /user...CVE-2020-234269.8 Critical
- zzcmsA blind SQL injection vulnerability exists in zzcms ver201910 based on time (cookie injection).CVE-2020-236308.8 High
- zzcmsThere is a XSS in the user login page in zzcms 2019. Users can inject js code by the referer...CVE-2020-202855.4 Medium
- zzcmszzcms 8.3 and earlier is affected by: SQL Injection. The impact is: sql inject. The component is:...CVE-2019-10101539.8 Critical
- zzcmszzcms 8.3 and earlier is affected by: File Delete to Code Execution. The impact is: getshell. The...CVE-2019-10101529.8 Critical
- zzcmszzcms 8.3 and earlier is affected by: File Delete to Code Execution. The impact is: getshell. The...CVE-2019-10101509.8 Critical
- zzcmszzcms version 8.3 and earlier is affected by: File Delete to Code Execution. The impact is: zzcms...CVE-2019-10101499.8 Critical
- zzcmszzcms version 8.3 and earlier is affected by: SQL Injection. The impact is: zzcms File Delete to...CVE-2019-10101489.8 Critical
- zzcms zzmcmszzcms zzmcms 8.3 and earlier is affected by: File Delete to getshell. The impact is: getshell....CVE-2019-10101519.8 Critical
- zzcmsA SQL injection vulnerability exists in zzcms v8.3 via the /admin/adclass.php bigclassid parameter.CVE-2018-174167.2 High
- zzcmszzcms V8.3 has a SQL injection in /user/zs_elite.php via the id parameter.CVE-2018-174158.8 High
- zzcmszzcms v8.3 has a SQL injection in /user/jobmanage.php via the bigclass parameter.CVE-2018-174148.8 High
- zzcmsXSS exists in zzcms v8.3 via the /uploadimg_form.php noshuiyin parameter.CVE-2018-174136.1 Medium
- zzcmszzcms v8.3 contains a SQL Injection vulnerability in /user/logincheck.php via an X-Forwarded-For...CVE-2018-174129.8 Critical
- zzcmszzcms 2019 has XSS via an arbitrary user/ask.php?do=modify parameter because inc/stopsqlin.php...CVE-2019-90785.4 Medium
- zzcmsadmin/dl_data.php in zzcms 2018 (2018-10-19) allows remote attackers to delete arbitrary files...CVE-2019-84117.5 High
- zzcmsAn issue was discovered in zzcms 8.3. SQL Injection exists in zs/zs_list.php via a pxzs cookie.CVE-2018-187929.8 Critical
- zzcmsAn issue was discovered in zzcms 8.3. SQL Injection exists in zs/search.php via a pxzs cookie.CVE-2018-187919.8 Critical
- zzcmsAn issue was discovered in zzcms 8.3. SQL Injection exists in admin/special_add.php via a...CVE-2018-187907.2 High
- zzcmsAn issue was discovered in zzcms 8.3. SQL Injection exists in zt/top.php via a Host HTTP header...CVE-2018-187899.8 Critical
- zzcmsAn issue was discovered in zzcms 8.3. SQL Injection exists in admin/classmanage.php via the...CVE-2018-187887.2 High
- zzcmsAn issue was discovered in zzcms 8.3. SQL Injection exists in zs/zs.php via a pxzs cookie.CVE-2018-187879.8 Critical
- zzcmsAn issue was discovered in zzcms 8.3. SQL Injection exists in ajax/zs.php via a pxzs cookie.CVE-2018-187869.8 Critical
- zzcmsAn issue was discovered in zzcms 8.3. SQL Injection exists in zs/subzs.php with a zzcmscpid...CVE-2018-187859.8 Critical
- zzcmsAn issue was discovered in zzcms 8.3. SQL Injection exists in admin/tagmanage.php via the...CVE-2018-187847.2 High
- zzcmsAn issue was discovered in zzcms 8.3. user/ztconfig.php allows remote attackers to delete...CVE-2018-177986.5 Medium
- zzcmsAn issue was discovered in zzcms 8.3. user/zssave.php allows remote attackers to delete arbitrary...CVE-2018-177976.5 Medium
- zzcmszzcms 8.3 contains a SQL Injection vulnerability in /user/check.php via a Client-Ip HTTP header.CVE-2018-171369.8 Critical
- zzcmsAn issue was discovered in zzcms 8.3. It allows remote attackers to delete arbitrary files via...CVE-2018-163447.5 High
- zzcmszzcms version 8.3 and earlier contains a SQL Injection vulnerability in zt/top.php line 5 that...CVE-2018-10006539.8 Critical
- zzcmszzcms 8.3 has CSRF via the admin/adminadd.php?action=add URI.CVE-2018-149638.8 High
- zzcmszzcms 8.3 has stored XSS related to the content variable in user/manage.php and zt/show.php.CVE-2018-149625.4 Medium
- zzcmsdl/dl_sendmail.php in zzcms 8.3 has SQL Injection via the sql parameter.CVE-2018-149619.8 Critical
- zzcms/user/del.php in zzcms 8.3 allows SQL injection via the tablename parameter after leveraging use...CVE-2018-131169.8 Critical
- zzcmsAn issue was discovered on zzcms 8.3. There is a vulnerability at /user/del.php that can delete...CVE-2018-130567.5 High
- zzcmsAn issue was discovered in zzcms 8.2. user/adv.php allows remote attackers to delete arbitrary...CVE-2018-93317.5 High
- Show moreLoading…