Zzcms

Zzcms

106 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2024-10291

  • EPSS 0.07%
  • Veröffentlicht 23.10.2024 16:15:04
  • Zuletzt bearbeitet 30.10.2024 13:23:47

A vulnerability has been found in ZZCMS 2023 and classified as critical. This vulnerability affects the function Ebak_DoExecSQL/Ebak_DotranExecutSQL of the file 3/Ebak5.1/upload/phome.php. The manipulation of the argument phome leads to sql injection...

9.8

CVE-2024-10292

  • EPSS 0.11%
  • Veröffentlicht 23.10.2024 16:15:04
  • Zuletzt bearbeitet 30.10.2024 13:40:07

A vulnerability was found in ZZCMS 2023 and classified as critical. This issue affects some unknown processing of the file 3/Ebak5.1/upload/ChangeTable.php. The manipulation of the argument savefilename leads to unrestricted upload. The attack may be...

7.5

CVE-2024-10290

  • EPSS 0.14%
  • Veröffentlicht 23.10.2024 15:15:30
  • Zuletzt bearbeitet 30.10.2024 15:06:00

A vulnerability, which was classified as problematic, was found in ZZCMS 2023. This affects an unknown part of the file 3/qq-connect2.0/API/com/inc.php. The manipulation leads to information disclosure. It is possible to initiate the attack remotely....

8.8

CVE-2024-44817

Exploit
  • EPSS 1.98%
  • Veröffentlicht 04.09.2024 16:15:07
  • Zuletzt bearbeitet 23.04.2025 15:02:22

SQL Injection vulnerability in ZZCMS v.2023 and before allows a remote attacker to obtain sensitive information via the id parameter in the adv2.php component.

5.4

CVE-2024-44818

Exploit
  • EPSS 0.25%
  • Veröffentlicht 04.09.2024 16:15:07
  • Zuletzt bearbeitet 23.04.2025 15:02:13

Cross Site Scripting vulnerability in ZZCMS v.2023 and before allows a remote attacker to obtain sensitive information via the HTTP_Referer header of the caina.php component.

5.3

CVE-2024-44821

Exploit
  • EPSS 0.29%
  • Veröffentlicht 04.09.2024 16:15:07
  • Zuletzt bearbeitet 23.04.2025 15:01:50

ZZCMS 2023 contains a vulnerability in the captcha reuse logic located in /inc/function.php. The checkyzm function does not properly refresh the captcha value after a failed validation attempt. As a result, an attacker can exploit this flaw by repeat...

6.1

CVE-2024-44819

Exploit
  • EPSS 0.49%
  • Veröffentlicht 04.09.2024 15:15:13
  • Zuletzt bearbeitet 13.03.2025 18:15:44

Cross Site Scripting vulnerability in ZZCMS v.2023 and before allows a remote attacker to obtain sensitive information via a crafted script to the pagename parameter of the admin/del.php component.

6.1

CVE-2024-44820

Exploit
  • EPSS 0.92%
  • Veröffentlicht 04.09.2024 15:15:13
  • Zuletzt bearbeitet 04.09.2024 19:35:13

A sensitive information disclosure vulnerability exists in ZZCMS v.2023 and before within the eginfo.php file located at /3/E_bak5.1/upload/. When accessed with the query parameter phome=ShowPHPInfo, the application executes the phpinfo() function, w...

7.5

CVE-2024-7926

Exploit
  • EPSS 0.37%
  • Veröffentlicht 19.08.2024 20:15:08
  • Zuletzt bearbeitet 04.09.2024 18:42:49

A vulnerability classified as critical has been found in ZZCMS 2023. Affected is an unknown function of the file /admin/about_edit.php?action=modify. The manipulation of the argument skin leads to path traversal. It is possible to launch the attack r...

7.5

CVE-2024-7927

Exploit
  • EPSS 0.37%
  • Veröffentlicht 19.08.2024 20:15:08
  • Zuletzt bearbeitet 04.09.2024 18:44:25

A vulnerability classified as critical was found in ZZCMS 2023. Affected by this vulnerability is an unknown functionality of the file /admin/class.php?dowhat=modifyclass. The manipulation of the argument skin[] leads to path traversal. The attack ca...