Vulnerabilities > Zzcms

DATE CVE VULNERABILITY TITLE RISK
2021-12-09 CVE-2021-40282 SQL Injection vulnerability in Zzcms
An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, abd 2021 in dl/dl_download.php.
network
low complexity
zzcms CWE-89
8.8
2021-12-09 CVE-2021-43703 Unspecified vulnerability in Zzcms
An Incorrect Access Control vulnerability exists in zzcms less than or equal to 2019 via admin.php.
network
low complexity
zzcms
critical
9.8
2021-12-09 CVE-2021-40279 SQL Injection vulnerability in Zzcms
An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, and 2021 via the id parameter in admin/bad.php.
network
low complexity
zzcms CWE-89
7.2
2021-12-09 CVE-2021-40280 SQL Injection vulnerability in Zzcms
An SQL Injection vulnerablitly exits in zzcms 8.2, 8.3, 2020, and 2021 via the id parameter in admin/dl_sendmail.php.
network
low complexity
zzcms CWE-89
7.2
2021-10-14 CVE-2020-19957 SQL Injection vulnerability in Zzcms 2019
A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive data via the id parameter on the /dl/dl_print.php page.
network
low complexity
zzcms CWE-89
7.5
2021-10-14 CVE-2020-19959 SQL Injection vulnerability in Zzcms 2019
A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive data via the dlid parameter in the /dl/dl_sendmail.php page cookie.
network
low complexity
zzcms CWE-89
7.5
2021-10-14 CVE-2020-19960 SQL Injection vulnerability in Zzcms 2019
A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive data via the dlid parameter in the /dl/dl_sendsms.php page cookie.
network
low complexity
zzcms CWE-89
7.5
2021-10-14 CVE-2020-19961 SQL Injection vulnerability in Zzcms 2019
A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive data via the component subzs.php.
network
low complexity
zzcms CWE-89
7.5
2021-08-26 CVE-2020-19822 Code Injection vulnerability in Zzcms 2018
A remote code execution (RCE) vulnerability in template_user.php of ZZCMS version 2018 allows attackers to execute arbitrary PHP code via the "ml" and "title" parameters.
network
low complexity
zzcms CWE-94
7.2
2021-06-03 CVE-2020-35973 Cross-site Scripting vulnerability in Zzcms 2020
An issue was discovered in zzcms2020.
network
low complexity
zzcms CWE-79
5.4