cby234/zzcms

Releases0

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2019-12352 ↗	Jun 17, 2022Friday, 17 June 2022, 13:15	8.8 HIGH	6.5 MEDIUM
An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /dl/dl_sendmail.php (when the attacker has dls_print authority) via a dlid cookie.
CVE-2019-12353 ↗	Jun 17, 2022Friday, 17 June 2022, 13:15	7.2 HIGH	6.5 MEDIUM
An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin/dl_sendmail.php (when the attacker has admin authority) via the id parameter.
CVE-2019-12354 ↗	Jun 17, 2022Friday, 17 June 2022, 13:15	7.2 HIGH	6.5 MEDIUM
An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin/showbad.php (when the attacker has admin authority) via the id parameter.
CVE-2019-12355 ↗	Jun 17, 2022Friday, 17 June 2022, 13:15	8.8 HIGH	6.5 MEDIUM
An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /user/dls_print.php (when the attacker has dls_print authority) via the id parameter.
CVE-2019-12356 ↗	Jun 17, 2022Friday, 17 June 2022, 13:15	8.8 HIGH	6.5 MEDIUM
An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /user/dls_download.php (when the attacker has dls_download authority) via the id parameter.
CVE-2019-12357 ↗	Jun 17, 2022Friday, 17 June 2022, 13:15	7.2 HIGH	6.5 MEDIUM
An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin/deluser.php (when the attacker has admin authority) via the id parameter.
CVE-2019-12358 ↗	Jun 17, 2022Friday, 17 June 2022, 13:15	8.8 HIGH	6.5 MEDIUM
An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /dl/dl_sendsms.php (when the attacker has dls_print authority) via a dlid cookie.
CVE-2019-12359 ↗	Jun 17, 2022Friday, 17 June 2022, 13:15	7.2 HIGH	6.5 MEDIUM
An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin/ztliuyan_sendmail.php (when the attacker has admin authority) via the id parameter.
CVE-2019-12349 ↗	Jun 2, 2022Thursday, 2 June 2022, 14:15	9.8 CRITICAL	7.5 HIGH
An issue was discovered in zzcms 2019. SQL Injection exists in /admin/dl_sendsms.php via the id parameter.
CVE-2019-12350 ↗	Jun 2, 2022Thursday, 2 June 2022, 14:15	9.8 CRITICAL	7.5 HIGH
An issue was discovered in zzcms 2019. SQL Injection exists in dl/dl_download.php via an id parameter value with a trailing comma.
CVE-2019-12351 ↗	Jun 2, 2022Thursday, 2 June 2022, 14:15	9.8 CRITICAL	7.5 HIGH
An issue was discovered in zzcms 2019. SQL Injection exists in dl/dl_print.php via an id parameter value with a trailing comma.
CVE-2019-12348 ↗	May 24, 2021Monday, 24 May 2021, 16:15	9.8 CRITICAL	7.5 HIGH
An issue was discovered in zzcms 2019. SQL Injection exists in user/ztconfig.php via the daohang or img POST parameter.