Zzzcms vulnerabilities

Products

• Zzzphp 14
• Zzzcms 6

Newest

• zzzcms File Upload vulnerability in zzzCMS v.2.1.9 allows a remote attacker to execute arbitrary code... CVE-2023-45555 7.8 HighOctober 24, 2023
• zzzcms File Upload vulnerability in zzzCMS v.2.1.9 allows a remote attacker to execute arbitrary code... CVE-2023-45554 9.8 CriticalOctober 24, 2023
• zzzcms zzzphp zzzcms v2.2.0 was discovered to contain an open redirect vulnerability. CVE-2023-45909 6.1 MediumOctober 18, 2023
• zzzcms ZZZCMS Personal Profile Page cross site scripting CVE-2023-5582 3.5 LowOctober 14, 2023
• zzzcms ZZZCMS Database Backup File save.php restore permission CVE-2023-5263 6.3 MediumSeptember 29, 2023
• zzzcms zzzphp ZZZCMS zzzphp v2.1.0 was discovered to contain a remote command execution (RCE) vulnerability via... CVE-2022-23881 EPSS 56.5% 9.8 CriticalMarch 23, 2022
• zzzcms A Cross Site Scripting (XSS) exists in ZZZCMS V1.7.1 via an editfile action in save.php. CVE-2020-19683 5.4 MediumDecember 9, 2021
• zzzcms A Cross Site Request Forgery (CSRF) vulnerability exits in ZZZCMS V1.7.1 via the save_user... CVE-2020-19682 8.8 HighDecember 9, 2021
• zzzcms zzzphp zzzcms zzzphp before 2.0.4 allows remote attackers to execute arbitrary OS commands by placing... CVE-2021-32605 9.8 CriticalMay 11, 2021
• zzzcms zzzphp A SQL injection vulnerability in zzzphp v1.8.0 through /form/index.php?module=getjson may lead to... CVE-2020-24877 9.8 CriticalMarch 15, 2021
• zzzcms zzzphp SQL Injection in ZZZCMS zzzphp 1.7.1 allows remote attackers to execute arbitrary code due to a... CVE-2020-18717 9.8 CriticalFebruary 4, 2021
• zzzcms zzzphp Eval injection vulnerability in the parserCommom method in the ParserTemplate class in... CVE-2020-20298 9.8 CriticalDecember 18, 2020
• zzzcms zzzphp parserIfLabel in inc/zzz_template.php in ZZZCMS zzzphp 1.7.3 allows remote attackers to execute... CVE-2019-17408 9.8 CriticalOctober 14, 2019
• zzzcms zzzphp ZZZCMS zzzphp v1.7.2 has an insufficient protection mechanism against PHP Code Execution, because... CVE-2019-16722 9.8 CriticalSeptember 23, 2019
• zzzcms zzzphp ZZZCMS zzzphp v1.7.2 does not properly restrict file upload in plugins/ueditor/php/controller.php... CVE-2019-16720 7.5 HighSeptember 23, 2019
• zzzcms zzzphp ZZZCMS zzzphp v1.6.3 allows remote attackers to execute arbitrary PHP code via a .php URL in the... CVE-2019-10647 9.8 CriticalMarch 30, 2019
• zzzcms zzzphp There is a CSRF in ZZZCMS zzzphp V1.6.1 via a /admin015/save.php?act=editfile request. It allows... CVE-2019-9182 8.8 HighFebruary 26, 2019
• thinkphp, opensourcebms open source background management system, zzzcms zzzphp +2 more ThinkPHP before 3.2.4, as used in Open Source BMS v1.1.1 and other products, allows Remote... CVE-2019-9082 In KEVPublic exploit EPSS 97.4% 8.8 HighFebruary 24, 2019
• zzzcms zzzphp An issue was discovered in ZZZCMS zzzphp V1.6.1. In the inc/zzz_template.php file, the... CVE-2019-9041 Public exploit EPSS 31.4% 7.2 HighFebruary 23, 2019
• zzzcms zzzphp An issue was discovered in zzzphp cms 1.5.8. del_file in /admin/save.php allows remote attackers... CVE-2018-20127 7.5 HighDecember 13, 2018