Zzcms
Page 2 of 2 — Zzcms CVEs from a corpus of 107, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-9309 | Critical | 9.8 | 2018-04-05 | An issue was discovered in zzcms 8.2. It allows SQL injection via the id parameter in a dl/dl_sendsms.php request. |
CVE-2018-8969 | High | 7.5 | 2018-03-24 | An issue was discovered in zzcms 8.2. user/licence_save.php allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg p… |
CVE-2018-8968 | High | 7.5 | 2018-03-24 | An issue was discovered in zzcms 8.2. user/manage.php allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg or oldf… |
CVE-2018-8967 | Critical | 9.8 | 2018-03-24 | An issue was discovered in zzcms 8.2. It allows SQL injection via the id parameter in an adv2.php?action=modify request. |
CVE-2018-8966 | High | 7.5 | 2018-03-24 | An issue was discovered in zzcms 8.2. It allows PHP code injection via the siteurl parameter to install/index.php, as demonstrated by injecting a phpinfo() cal… |
CVE-2018-8965 | High | 7.5 | 2018-03-24 | An issue was discovered in zzcms 8.2. user/ppsave.php allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg paramet… |
CVE-2018-7434 | Medium | 5.3 | 2018-02-24 | zzcms 8.2 allows remote attackers to discover the full path via a direct request to 3/qq_connect2.0/API/class/ErrorCase.class.php or 3/ucenter_api/code/friend… |