Login Request a demo
ZZ
Vendor
Zzcms
2 products with CVEs on record
107
CVEs
0
On KEV
0
New 30D
Products
ZZ
ZZCMS
Zzcms
9.8
106 CVEs0 on KEV0 new
ZZ
Zzmcms
Zzcms
9.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2025-14837
ZZ
ZZCMS
Zzcms
7.2
0%
Dec 17ZZCMS Backend Website Settings siteconfig.php stripfxg code injection
CVE-2025-14836
ZZ
ZZCMS
Zzcms
2.7
0%
Dec 17ZZCMS User Data Storage user_save.php cleartext storage in file
CVE-2025-13171
ZZ
ZZCMS
Zzcms
8.8
0%
Nov 14ZZCMS wangkan_list.php sql injection
CVE-2025-1949
ZZ
Zzcms
Zzcms
6.1
1%
Mar 4ZZCMS URL register_nodb.php cross site scripting
CVE-2025-22957
ZZ
Zzcms
Zzcms
9.8
1%
Jan 31A SQL injection vulnerability exists in the front-end of the website in ZZCMS <= 2023, which can be exploited without any authentication
CVE-2025-0565
ZZ
Zzcms
Zzcms
9.8
1%
Jan 19ZZCMS index.php sql injection
CVE-2024-52724
ZZ
Zzcms
Zzcms
9.8
1%
Dec 2ZZCMS 2023 was discovered to contain a SQL injection vulnerability in /q/show.php
CVE-2024-11242
ZZ
Zzcms
Zzcms
7.2
1%
Nov 15ZZCMS Keyword Filtering ad_list.php sql injection
CVE-2024-11130
ZZ
Zzcms
Zzcms
4.8
0%
Nov 12ZZCMS msg.php cross site scripting
CVE-2024-10293
ZZ
Zzcms
Zzcms
9.8
1%
Oct 23ZZCMS functions.php Ebak_SetGotoPak unrestricted upload
CVE-2024-10292
ZZ
Zzcms
Zzcms
9.8
0%
Oct 23ZZCMS ChangeTable.php unrestricted upload
CVE-2024-10291
ZZ
Zzcms
Zzcms
9.8
0%
Oct 23ZZCMS phome.php Ebak_DotranExecutSQL sql injection
CVE-2024-10290
ZZ
Zzcms
Zzcms
7.5
1%
Oct 23ZZCMS inc.php information disclosure
CVE-2024-44819
ZZ
Zzcms
Zzcms
6.1
0%
Sep 4Cross Site Scripting vulnerability in ZZCMS v.2023 and before allows a remote attacker to obtain sensitive information via a crafted script to the pagename parameter of the…
CVE-2024-44821
ZZ
Zzcms
Zzcms
5.3
0%
Sep 4ZZCMS 2023 contains a vulnerability in the captcha reuse logic located in /inc/function.php
CVE-2024-44818
ZZ
Zzcms
Zzcms
5.4
0%
Sep 4Cross Site Scripting vulnerability in ZZCMS v.2023 and before allows a remote attacker to obtain sensitive information via the HTTP_Referer header of the caina.php component
CVE-2024-44817
ZZ
Zzcms
Zzcms
8.8
1%
Sep 4SQL Injection vulnerability in ZZCMS v.2023 and before allows a remote attacker to obtain sensitive information via the id parameter in the adv2.php component
CVE-2024-44820
ZZ
Zzcms
Zzcms
6.1
0%
Sep 4A sensitive information disclosure vulnerability exists in ZZCMS v.2023 and before within the eginfo.php file located at /3/E_bak5.1/upload/
CVE-2024-7927
ZZ
Zzcms
Zzcms
7.5
1%
Aug 19A vulnerability classified as critical was found in ZZCMS 2023
CVE-2024-7926
ZZ
Zzcms
Zzcms
7.5
1%
Aug 19A vulnerability classified as critical has been found in ZZCMS 2023
CVE-2024-7925
ZZ
Zzcms
Zzcms
7.5
1%
Aug 19A vulnerability was found in ZZCMS 2023
CVE-2024-7924
ZZ
Zzcms
Zzcms
7.5
1%
Aug 19A vulnerability was found in ZZCMS 2023
CVE-2024-43011
ZZ
Zzcms
Zzcms
4.9
1%
Aug 16An arbitrary file deletion vulnerability exists in the admin/del.php file at line 62 in ZZCMS 2023 and earlier
CVE-2024-43009
ZZ
Zzcms
Zzcms
4.7
0%
Aug 16A reflected cross-site scripting (XSS) vulnerability exists in user/login.php at line 24 in ZZCMS 2023 and earlier
CVE-2024-43006
ZZ
Zzcms
Zzcms
5.4
0%
Aug 16A stored cross-site scripting (XSS) vulnerability exists in ZZCMS2023 in the ask/show.php file at line 21
CVE-2024-43005
ZZ
Zzcms
Zzcms
4.7
0%
Aug 16A reflected cross-site scripting (XSS) vulnerability in the component dl_liuyan_save.php of ZZCMS v2023 allows attackers to execute arbitrary code in the context of a user's…
CVE-2023-50104
ZZ
Zzcms
Zzcms
9.8
1%
Dec 29ZZCMS 2023 has a file upload vulnerability in 3/E_bak5.1/upload/index.php, allowing attackers to exploit this loophole to gain server privileges and execute arbitrary code
CVE-2023-42398
ZZ
Zzcms
Zzcms
9.8
2%
Sep 15An issue in zzCMS v.2023 allows a remote attacker to execute arbitrary code and obtain sensitive information via the ueditor component in controller.php
CVE-2023-36162
ZZ
Zzcms
Zzcms
8.8
1%
Jul 3Cross Site Request Forgery vulnerability in ZZCMS v.2023 and earlier allows a remote attacker to gain privileges via the add function in adminlist.php
CVE-2022-44361
ZZ
Zzcms
Zzcms
5.4
0%
Dec 7An issue was discovered in ZZCMS 2022
CVE-2022-40447
ZZ
Zzcms
Zzcms
7.2
1%
Sep 22ZZCMS 2022 was discovered to contain a SQL injection vulnerability via the keyword parameter at /admin/baojia_list.php
CVE-2022-40446
ZZ
Zzcms
Zzcms
7.2
1%
Sep 22ZZCMS 2022 was discovered to contain a SQL injection vulnerability via the component /admin/sendmailto.php?tomail=&groupid=
CVE-2022-40444
ZZ
Zzcms
Zzcms
5.3
1%
Sep 22ZZCMS 2022 was discovered to contain a full path disclosure vulnerability via the page /admin/index.PHP? _server
CVE-2022-40443
ZZ
Zzcms
Zzcms
5.3
3%
Sep 22An absolute path traversal vulnerability in ZZCMS 2022 allows attackers to obtain sensitive information via a crafted GET request sent to /one/siteinfo.php
CVE-2019-12359
ZZ
Zzcms
Zzcms
7.2
1%
Jun 17An issue was discovered in zzcms 2019
CVE-2019-12358
ZZ
Zzcms
Zzcms
8.8
1%
Jun 17An issue was discovered in zzcms 2019
CVE-2019-12357
ZZ
Zzcms
Zzcms
7.2
1%
Jun 17An issue was discovered in zzcms 2019
CVE-2019-12356
ZZ
Zzcms
Zzcms
8.8
1%
Jun 17An issue was discovered in zzcms 2019
CVE-2019-12355
ZZ
Zzcms
Zzcms
8.8
1%
Jun 17An issue was discovered in zzcms 2019
CVE-2019-12354
ZZ
Zzcms
Zzcms
7.2
1%
Jun 17An issue was discovered in zzcms 2019
CVE-2019-12353
ZZ
Zzcms
Zzcms
7.2
1%
Jun 17An issue was discovered in zzcms 2019
CVE-2019-12352
ZZ
Zzcms
Zzcms
8.8
1%
Jun 17An issue was discovered in zzcms 2019
CVE-2019-12351
ZZ
Zzcms
Zzcms
9.8
1%
Jun 2An issue was discovered in zzcms 2019
CVE-2019-12350
ZZ
Zzcms
Zzcms
9.8
1%
Jun 2An issue was discovered in zzcms 2019
CVE-2019-12349
ZZ
Zzcms
Zzcms
9.8
1%
Jun 2An issue was discovered in zzcms 2019
CVE-2021-46437
ZZ
Zzcms
Zzcms
4.8
0%
Apr 8An issue was discovered in ZZCMS 2021
CVE-2021-46436
ZZ
Zzcms
Zzcms
7.2
1%
Apr 8An issue was discovered in ZZCMS 2021
CVE-2021-45347
ZZ
Zzcms
Zzcms
7.5
1%
Feb 14An Incorrect Access Control vulnerability exists in zzcms 8.2, which lets a malicious user bypass authentication by changing the user name in the cookie to use any password
CVE-2021-45286
ZZ
Zzcms
Zzcms
5.3
2%
Feb 9Directory Traversal vulnerability exists in ZZCMS 2021 via the skin parameter in 1) index.php, 2) bottom.php, and 3) top_index.php
CVE-2021-42945
ZZ
Zzcms
Zzcms
9.8
1%
Dec 15A SQL Injection vulnerability exists in ZZCMS 2021 via the askbigclassid parameter in /admin/ask.php
CVE-2020-19042
ZZ
Zzcms
Zzcms
6.1
1%
Dec 13Cross Site Scripting (XSS) vulnerability exists in zzcms 2019 XSS via a modify action in user/adv.php
CVE-2021-43703
ZZ
Zzcms
Zzcms
9.8
2%
Dec 9An Incorrect Access Control vulnerability exists in zzcms less than or equal to 2019 via admin.php
CVE-2021-40282
ZZ
Zzcms
Zzcms
8.8
1%
Dec 9An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, abd 2021 in dl/dl_download.php
CVE-2021-40281
ZZ
Zzcms
Zzcms
8.8
1%
Dec 9An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, and 2021 in dl/dl_print.php when registering ordinary users
CVE-2021-40280
ZZ
Zzcms
Zzcms
7.2
1%
Dec 9An SQL Injection vulnerablitly exits in zzcms 8.2, 8.3, 2020, and 2021 via the id parameter in admin/dl_sendmail.php
CVE-2021-40279
ZZ
Zzcms
Zzcms
7.2
1%
Dec 9An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, and 2021 via the id parameter in admin/bad.php
CVE-2020-19961
ZZ
Zzcms
Zzcms
7.5
2%
Oct 14A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive data via the component subzs.php
CVE-2020-19960
ZZ
Zzcms
Zzcms
7.5
2%
Oct 14A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive data via the dlid parameter in the /dl/dl_sendsms.php page…
CVE-2020-19959
ZZ
Zzcms
Zzcms
7.5
2%
Oct 14A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive data via the dlid parameter in the /dl/dl_sendmail.php page…
CVE-2020-19957
ZZ
Zzcms
Zzcms
7.5
2%
Oct 14A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive data via the id parameter on the /dl/dl_print.php page