Vulnerabilities

TI-2025-13534 CVE-2025-14837 · GHSA-gp85-pqj7-66qv

ZZCMS Backend Website Settings siteconfig.php stripfxg code injection

MEDIUM 56

A vulnerability has been found in ZZCMS 2025.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00458 Published 2025-12-17 No fix listed CWE-74

TI-2025-13533 CVE-2025-14836 · GHSA-hqqq-fq68-35hf

ZZCMS User Data Storage user_save.php cleartext storage in file

MEDIUM 56

A flaw has been found in ZZCMS 2025.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00203 Published 2025-12-17 No fix listed CWE-312

TI-2025-12042 CVE-2025-13171 · GHSA-m4fx-3r3r-w4xv

ZZCMS wangkan_list.php sql injection

MEDIUM 57

A vulnerability was identified in ZZCMS 2023.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00381 Published 2025-11-14 No fix listed CWE-74

TI-2025-01694 CVE-2025-1949 · GHSA-7w6g-vq95-c259

ZZCMS URL register_nodb.php cross site scripting

MEDIUM 57

A vulnerability, which was classified as problematic, has been found in ZZCMS 2025.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00511 Published 2025-03-04 No fix listed CWE-79

TI-2025-16800 CVE-2025-22957 · GHSA-pmc3-v8x7-chwc

A SQL injection vulnerability exists in the front-end of the website in ZZCMS <= 2023…

MEDIUM 50

A SQL injection vulnerability exists in the front-end of the website in ZZCMS <= 2023, which can be exploited without any authentication.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0056 Published 2025-01-31 No fix listed CWE-89

TI-2025-00469 CVE-2025-0565 · GHSA-jh6q-j2jh-mp6g

ZZCMS index.php sql injection

HIGH 70

A vulnerability was found in ZZCMS 2023.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.01492 Published 2025-01-19 No fix listed CWE-74

TI-2024-35279 CVE-2024-52724 · GHSA-m3p7-vcc9-vwjx

ZZCMS 2023 was discovered to contain a SQL injection vulnerability in /q/show.php.

HIGH 82

ZZCMS 2023 was discovered to contain a SQL injection vulnerability in /q/show.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00578 Published 2024-12-02 No fix listed CWE-89

TI-2024-10415 CVE-2024-11242 · GHSA-q79q-mvw6-5crr

ZZCMS Keyword Filtering ad_list.php sql injection

MEDIUM 56

A vulnerability was found in ZZCMS 2023.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00569 Published 2024-11-15 No fix listed CWE-74

TI-2024-10314 CVE-2024-11130 · GHSA-vx6f-r8cp-5qf8

ZZCMS msg.php cross site scripting

LOW 23

A vulnerability was found in ZZCMS up to 2023.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00314 Published 2024-11-12 No fix listed CWE-79

TI-2024-09538 CVE-2024-10293 · GHSA-rw27-7fmj-vgcv

ZZCMS functions.php Ebak_SetGotoPak unrestricted upload

MEDIUM 57

A vulnerability was found in ZZCMS 2023.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00517 Published 2024-10-23 No fix listed CWE-434

TI-2024-09537 CVE-2024-10292 · GHSA-67cp-gwr2-6w65

ZZCMS ChangeTable.php unrestricted upload

MEDIUM 57

A vulnerability was found in ZZCMS 2023 and classified as critical.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00497 Published 2024-10-23 No fix listed CWE-434

TI-2024-09536 CVE-2024-10291 · GHSA-w8rc-768j-hfvx

ZZCMS phome.php Ebak_DotranExecutSQL sql injection

MEDIUM 57

A vulnerability has been found in ZZCMS 2023 and classified as critical.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00482 Published 2024-10-23 No fix listed CWE-89

TI-2024-09535 CVE-2024-10290 · GHSA-f385-9qgv-4p4v

ZZCMS inc.php information disclosure

LOW 31

A vulnerability, which was classified as problematic, was found in ZZCMS 2023.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00587 Published 2024-10-23 No fix listed CWE-200

TI-2024-30009 CVE-2024-44821 · GHSA-6g49-7hrc-9j92

ZZCMS 2023 contains a vulnerability in the captcha reuse logic located in…

LOW 30

ZZCMS 2023 contains a vulnerability in the captcha reuse logic located in /inc/function.php.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00421 Published 2024-09-04 No fix listed CWE-287

TI-2024-30008 CVE-2024-44820 · GHSA-j2p5-fvjc-rrwc

A sensitive information disclosure vulnerability exists in ZZCMS v.2023 and before within…

LOW 39

A sensitive information disclosure vulnerability exists in ZZCMS v.2023 and before within the eginfo.php file located at /3/E_bak5.1/upload/.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00375 Published 2024-09-04 No fix listed CWE-200

TI-2024-30007 CVE-2024-44819 · GHSA-r3xx-2cqf-j665

Cross Site Scripting vulnerability in ZZCMS v.2023 and before allows a remote attacker to…

LOW 27

Cross Site Scripting vulnerability in ZZCMS v.2023 and before allows a remote attacker to obtain sensitive information via a crafted script to the pagename parameter of the admin/del.php component.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00399 Published 2024-09-04 No fix listed CWE-79

TI-2024-30006 CVE-2024-44818 · GHSA-39jm-vmh3-fp62

Cross Site Scripting vulnerability in ZZCMS v.2023 and before allows a remote attacker to…

MEDIUM 58

Cross Site Scripting vulnerability in ZZCMS v.2023 and before allows a remote attacker to obtain sensitive information via the HTTP_Referer header of the caina.php component.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00399 Published 2024-09-04 No fix listed CWE-79

TI-2024-30005 CVE-2024-44817 · GHSA-8c2m-6m99-9w9r

SQL Injection vulnerability in ZZCMS v.2023 and before allows a remote attacker to obtain…

HIGH 73

SQL Injection vulnerability in ZZCMS v.2023 and before allows a remote attacker to obtain sensitive information via the id parameter in the adv2.php component.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00687 Published 2024-09-04 No fix listed CWE-89

TI-2024-07349 CVE-2024-7927 · GHSA-r7gp-vvfr-gpr6

ZZCMS class.php path traversal

HIGH 70

A vulnerability classified as critical was found in ZZCMS 2023.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00932 Published 2024-08-19 No fix listed CWE-22

TI-2024-07348 CVE-2024-7926 · GHSA-8pcq-v58x-j36p

ZZCMS about_edit.php path traversal

MEDIUM 64

A vulnerability classified as critical has been found in ZZCMS 2023.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00932 Published 2024-08-19 No fix listed CWE-22

TI-2024-07347 CVE-2024-7925 · GHSA-f776-8qvr-rf72

ZZCMS eginfo.php information disclosure

MEDIUM 57

A vulnerability was found in ZZCMS 2023.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00635 Published 2024-08-19 No fix listed CWE-200

TI-2024-07346 CVE-2024-7924 · GHSA-4cm7-5r54-q82c

ZZCMS list.php path traversal

LOW 39

A vulnerability was found in ZZCMS 2023.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0142 Published 2024-08-19 No fix listed CWE-22

TI-2024-28720 CVE-2024-43011 · GHSA-mw3w-8r3q-gm92

An arbitrary file deletion vulnerability exists in the admin/del.php file at line 62 in…

MEDIUM 56

An arbitrary file deletion vulnerability exists in the admin/del.php file at line 62 in ZZCMS 2023 and earlier.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00672 Published 2024-08-16 No fix listed CWE-22

TI-2024-28719 CVE-2024-43009 · GHSA-g5p7-39ff-j5mv

A reflected cross-site scripting (XSS) vulnerability exists in user/login.php at line 24…

MEDIUM 55

A reflected cross-site scripting (XSS) vulnerability exists in user/login.php at line 24 in ZZCMS 2023 and earlier.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.0039 Published 2024-08-16 No fix listed CWE-79

TI-2024-28718 CVE-2024-43006 · GHSA-43p9-cg2h-73x3

A stored cross-site scripting (XSS) vulnerability exists in ZZCMS2023 in the ask/show.php…

MEDIUM 58

A stored cross-site scripting (XSS) vulnerability exists in ZZCMS2023 in the ask/show.php file at line 21.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0024 Published 2024-08-16 No fix listed CWE-79

Vulnerabilities

Filters