Zcms Project

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Zcms Project records in CISA KEV

No Zcms Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records in Zcms · all components

TI-2015-06109 CVE-2015-7346 · GHSA-c6xh-2qmr-c6xc

MEDIUM 48

SQL injection vulnerability in ZCMS 1.1.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.037 Published 2017-06-07 No fix listed CWE-89

TI-2022-11211 CVE-2022-28521 · GHSA-vx7h-vmc2-6wp8

MEDIUM 45

ZCMS v20170206 was discovered to contain a file inclusion vulnerability via index.php?m=home&c=home&a=sp_set_config.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01618 Published 2022-04-26 No fix listed

TI-2022-11212 CVE-2022-28522 · GHSA-x7mq-4mr7-gj5c

LOW 25

ZCMS v20170206 was discovered to contain a stored cross-site scripting (XSS) vulnerability via index.php?m=home&c=message&a=add.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00608 Published 2022-04-26 No fix listed CWE-79

TI-2015-06110 CVE-2015-7347 · GHSA-qf2v-c5vj-73xg

LOW 24

Cross-site scripting (XSS) vulnerability in ZCMS JavaServer Pages Content Management System 1.1.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.01107 Published 2017-09-20 No fix listed CWE-79