Vulnerabilities > Zzcms > Critical

DATE CVE VULNERABILITY TITLE RISK
2018-10-29 CVE-2018-18791 SQL Injection vulnerability in Zzcms 8.3
An issue was discovered in zzcms 8.3.
network
low complexity
zzcms CWE-89
critical
9.8
2018-10-29 CVE-2018-18789 SQL Injection vulnerability in Zzcms 8.3
An issue was discovered in zzcms 8.3.
network
low complexity
zzcms CWE-89
critical
9.8
2018-10-29 CVE-2018-18787 SQL Injection vulnerability in Zzcms 8.3
An issue was discovered in zzcms 8.3.
network
low complexity
zzcms CWE-89
critical
9.8
2018-10-29 CVE-2018-18786 SQL Injection vulnerability in Zzcms 8.3
An issue was discovered in zzcms 8.3.
network
low complexity
zzcms CWE-89
critical
9.8
2018-10-29 CVE-2018-18785 SQL Injection vulnerability in Zzcms 8.3
An issue was discovered in zzcms 8.3.
network
low complexity
zzcms CWE-89
critical
9.8
2018-09-17 CVE-2018-17136 SQL Injection vulnerability in Zzcms 8.3
zzcms 8.3 contains a SQL Injection vulnerability in /user/check.php via a Client-Ip HTTP header.
network
low complexity
zzcms CWE-89
critical
9.8
2018-08-20 CVE-2018-1000653 SQL Injection vulnerability in Zzcms
zzcms version 8.3 and earlier contains a SQL Injection vulnerability in zt/top.php line 5 that can result in could be attacked by sql injection in zzcms in nginx.
network
low complexity
zzcms CWE-89
critical
9.8
2018-08-06 CVE-2018-14961 SQL Injection vulnerability in Zzcms 8.3
dl/dl_sendmail.php in zzcms 8.3 has SQL Injection via the sql parameter.
network
low complexity
zzcms CWE-89
critical
9.8
2018-07-03 CVE-2018-13116 SQL Injection vulnerability in Zzcms 8.3.
/user/del.php in zzcms 8.3 allows SQL injection via the tablename parameter after leveraging use of the zzcms_ask table.
network
low complexity
zzcms CWE-89
critical
9.8
2018-04-05 CVE-2018-9309 SQL Injection vulnerability in Zzcms 8.2
An issue was discovered in zzcms 8.2.
network
low complexity
zzcms CWE-89
critical
9.8