liong007/ZZCMS

liong007/ZZCMS

Releases1
Frequency
Last Release
zzcms,站长招商网cms,适用于招商代理型的行业网站,可用于医药招商网站程序源码,服装招商网站程序源码,化妆品招商网站的程序源码等。目前forget-code项目缓存了ZZCMS 2022的版本,官网最新版下载地址:http://www.zzcms.net/download/zzcms2022.zip

CVE History

CVEPublishedCVSS v3CVSS v2
5.3 MEDIUM

An absolute path traversal vulnerability in ZZCMS 2022 allows attackers to obtain sensitive information via a crafted GET request sent to /one/siteinfo.php.

5.3 MEDIUM

ZZCMS 2022 was discovered to contain a full path disclosure vulnerability via the page /admin/index.PHP? _server.

7.2 HIGH

ZZCMS 2022 was discovered to contain a SQL injection vulnerability via the component /admin/sendmailto.php?tomail=&groupid=.

7.2 HIGH

ZZCMS 2022 was discovered to contain a SQL injection vulnerability via the keyword parameter at /admin/baojia_list.php.