Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
zzcms vulnerabilities and exploits
(subscribe to this query)
8.8
CVSSv3
CVE-2023-36162
Cross Site Request Forgery vulnerability in ZZCMS v.2023 and previous versions allows a remote malicious user to gain privileges via the add function in adminlist.php.
Zzcms Zzcms 2023
9.8
CVSSv3
CVE-2018-9309
An issue exists in zzcms 8.2. It allows SQL injection via the id parameter in a dl/dl_sendsms.php request.
Zzcms Zzcms 8.2
7.5
CVSSv3
CVE-2018-9331
An issue exists in zzcms 8.2. user/adv.php allows remote malicious users to delete arbitrary files via directory traversal sequences in the oldimg parameter. This can be leveraged for database access by deleting install.lock.
Zzcms Zzcms 8.2
9.8
CVSSv3
CVE-2018-17412
zzcms v8.3 contains a SQL Injection vulnerability in /user/logincheck.php via an X-Forwarded-For HTTP header.
Zzcms Zzcms 8.3
8.8
CVSSv3
CVE-2018-17415
zzcms V8.3 has a SQL injection in /user/zs_elite.php via the id parameter.
Zzcms Zzcms 8.3
6.5
CVSSv3
CVE-2018-17797
An issue exists in zzcms 8.3. user/zssave.php allows remote malicious users to delete arbitrary files via directory traversal sequences in the oldimg parameter in an action=modify request. This can be leveraged for database access by deleting install.lock.
Zzcms Zzcms 8.3
9.8
CVSSv3
CVE-2019-12348
An issue exists in zzcms 2019. SQL Injection exists in user/ztconfig.php via the daohang or img POST parameter.
Zzcms Zzcms 2019
9.8
CVSSv3
CVE-2019-12349
An issue exists in zzcms 2019. SQL Injection exists in /admin/dl_sendsms.php via the id parameter.
Zzcms Zzcms 2019
9.8
CVSSv3
CVE-2019-12350
An issue exists in zzcms 2019. SQL Injection exists in dl/dl_download.php via an id parameter value with a trailing comma.
Zzcms Zzcms 2019
9.8
CVSSv3
CVE-2019-12351
An issue exists in zzcms 2019. SQL Injection exists in dl/dl_print.php via an id parameter value with a trailing comma.
Zzcms Zzcms 2019
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3012
CVE-2024-30200
XXE
CVE-2023-24955
CVE-2023-42931
CVE-2024-29231
remote code execution
cross-site scripting
CVE-2024-0677
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
NEXT »