A SQL injection vulnerability exists in the front-end of the website in ZZCMS <= 2023, which can be exploited without any authentication

ZZCMS index.php sql injection

ZZCMS 2023 was discovered to contain a SQL injection vulnerability in /q/show.php

ZZCMS functions.php Ebak_SetGotoPak unrestricted upload

ZZCMS ChangeTable.php unrestricted upload

ZZCMS phome.php Ebak_DotranExecutSQL sql injection

ZZCMS 2023 has a file upload vulnerability in 3/E_bak5.1/upload/index.php, allowing attackers to exploit this loophole to gain server privileges and execute arbitrary code

An issue in zzCMS v.2023 allows a remote attacker to execute arbitrary code and obtain sensitive information via the ueditor component in controller.php

An issue was discovered in zzcms 2019

An issue was discovered in zzcms 2019

An issue was discovered in zzcms 2019

A SQL Injection vulnerability exists in ZZCMS 2021 via the askbigclassid parameter in /admin/ask.php

An Incorrect Access Control vulnerability exists in zzcms less than or equal to 2019 via admin.php

An issue was discovered in zzcms 2019

zzcms 201910 contains an access control vulnerability through escalation of privileges in /user/adv.php, which allows an attacker to modify data for further attacks such as CSRF

zzcms 8.3 and earlier is affected by: SQL Injection

zzcms 8.3 and earlier is affected by: File Delete to Code Execution

zzcms 8.3 and earlier is affected by: File Delete to Code Execution

zzcms version 8.3 and earlier is affected by: File Delete to Code Execution

zzcms version 8.3 and earlier is affected by: SQL Injection

zzcms v8.3 contains a SQL Injection vulnerability in /user/logincheck.php via an X-Forwarded-For HTTP header

An issue was discovered in zzcms 8.3

An issue was discovered in zzcms 8.3

An issue was discovered in zzcms 8.3

An issue was discovered in zzcms 8.3

An issue was discovered in zzcms 8.3

An issue was discovered in zzcms 8.3

zzcms 8.3 contains a SQL Injection vulnerability in /user/check.php via a Client-Ip HTTP header

zzcms version 8.3 and earlier contains a SQL Injection vulnerability in zt/top.php line 5 that can result in could be attacked by sql injection in zzcms in nginx

dl/dl_sendmail.php in zzcms 8.3 has SQL Injection via the sql parameter

/user/del.php in zzcms 8.3 allows SQL injection via the tablename parameter after leveraging use of the zzcms_ask table

An issue was discovered in zzcms 8.2

An issue was discovered in zzcms 8.2

ZZCMS wangkan_list.php sql injection

SQL Injection vulnerability in ZZCMS v.2023 and before allows a remote attacker to obtain sensitive information via the id parameter in the adv2.php component

Cross Site Request Forgery vulnerability in ZZCMS v.2023 and earlier allows a remote attacker to gain privileges via the add function in adminlist.php

An issue was discovered in zzcms 2019

An issue was discovered in zzcms 2019

An issue was discovered in zzcms 2019

An issue was discovered in zzcms 2019

An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, abd 2021 in dl/dl_download.php

An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, and 2021 in dl/dl_print.php when registering ordinary users

A blind SQL injection vulnerability exists in zzcms ver201910 based on time (cookie injection)

zzcms V8.3 has a SQL injection in /user/zs_elite.php via the id parameter

zzcms v8.3 has a SQL injection in /user/jobmanage.php via the bigclass parameter

zzcms 8.3 has CSRF via the admin/adminadd.php?action=add URI

ZZCMS inc.php information disclosure

A vulnerability classified as critical was found in ZZCMS 2023

A vulnerability classified as critical has been found in ZZCMS 2023

A vulnerability was found in ZZCMS 2023