Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-22957
9.8
CRITICALCVSS v3
Published
January 31, 2025
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
A SQL injection vulnerability exists in the front-end of the website in ZZCMS <= 2023, which can be exploited without any authentication. This vulnerability could potentially allow attackers to gain unauthorized access to the database and extract sensitive information.
liong007/ZZCMS
GitHubzzcms,站长招商网cms,适用于招商代理型的行业网站,可用于医药招商网站程序源码,服装招商网站程序源码,化妆品招商网站的程序源码等。目前forget-code项目缓存了ZZCMS 2022的版本，官网最新版下载地址：http://www.zzcms.net/download/zzcms2022.zip
GitHubzzcms,站长招商网cms,适用于招商代理型的行业网站,可用于医药招商网站程序源码,服装招商网站程序源码,化妆品招商网站的程序源码等。目前forget-code项目缓存了ZZCMS 2022的版本，官网最新版下载地址：http://www.zzcms.net/download/zzcms2022.zip<= 2023NVD
forget-code/zzcmsGitHubzzcms,站长招商网cms,适用于招商代理型的行业网站,可用于医药招商网站程序源码,服装招商网站程序源码,化妆品招商网站的程序源码等。目前forget-code项目缓存了v7.0~2019的版本，官网最新版下载地址：http://www.zzcms.net/about/6.htm
GitHubzzcms,站长招商网cms,适用于招商代理型的行业网站,可用于医药招商网站程序源码,服装招商网站程序源码,化妆品招商网站的程序源码等。目前forget-code项目缓存了v7.0~2019的版本，官网最新版下载地址：http://www.zzcms.net/about/6.htm<= 2023NVD