Vulnerabilities > Zzcms

DATE CVE VULNERABILITY TITLE RISK
2018-10-29 CVE-2018-18787 SQL Injection vulnerability in Zzcms 8.3
An issue was discovered in zzcms 8.3.
network
low complexity
zzcms CWE-89
critical
9.8
2018-10-29 CVE-2018-18786 SQL Injection vulnerability in Zzcms 8.3
An issue was discovered in zzcms 8.3.
network
low complexity
zzcms CWE-89
critical
9.8
2018-10-29 CVE-2018-18785 SQL Injection vulnerability in Zzcms 8.3
An issue was discovered in zzcms 8.3.
network
low complexity
zzcms CWE-89
critical
9.8
2018-10-29 CVE-2018-18784 SQL Injection vulnerability in Zzcms 8.3
An issue was discovered in zzcms 8.3.
network
low complexity
zzcms CWE-89
7.2
2018-09-30 CVE-2018-17798 Path Traversal vulnerability in Zzcms 8.3
An issue was discovered in zzcms 8.3.
network
low complexity
zzcms CWE-22
6.5
2018-09-30 CVE-2018-17797 Path Traversal vulnerability in Zzcms 8.3
An issue was discovered in zzcms 8.3.
network
low complexity
zzcms CWE-22
6.5
2018-09-17 CVE-2018-17136 SQL Injection vulnerability in Zzcms 8.3
zzcms 8.3 contains a SQL Injection vulnerability in /user/check.php via a Client-Ip HTTP header.
network
low complexity
zzcms CWE-89
critical
9.8
2018-09-02 CVE-2018-16344 Path Traversal vulnerability in Zzcms 8.3
An issue was discovered in zzcms 8.3.
network
low complexity
zzcms CWE-22
7.5
2018-08-20 CVE-2018-1000653 SQL Injection vulnerability in Zzcms
zzcms version 8.3 and earlier contains a SQL Injection vulnerability in zt/top.php line 5 that can result in could be attacked by sql injection in zzcms in nginx.
network
low complexity
zzcms CWE-89
critical
9.8
2018-08-06 CVE-2018-14963 Cross-Site Request Forgery (CSRF) vulnerability in Zzcms 8.3.
zzcms 8.3 has CSRF via the admin/adminadd.php?action=add URI.
network
low complexity
zzcms CWE-352
8.8