RSS   Podatności dla 'Zbzcms'   RSS

2022-04-10
 
CVE-2022-27125

CWE-79
 
 
zbzcms v1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the neirong parameter at /php/ajax.php.

 
 
CVE-2022-27126

CWE-89
 
 
zbzcms v1.0 was discovered to contain a SQL injection vulnerability via the art parameter at /include/make.php.

 
 
CVE-2022-27127

CWE-89
 
 
zbzcms v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php/ajax.php.

 
 
CVE-2022-27128

CWE-863
 
 
An incorrect access control issue at /admin/run_ajax.php in zbzcms v1.0 allows attackers to arbitrarily add administrator accounts.

 
 
CVE-2022-27129

CWE-434
 
 
An arbitrary file upload vulnerability at /admin/ajax.php in zbzcms v1.0 allows attackers to execute arbitrary code via a crafted PHP file.

 
 
CVE-2022-27131

CWE-434
 
 
An arbitrary file upload vulnerability at /zbzedit/php/zbz.php in zbzcms v1.0 allows attackers to execute arbitrary code via a crafted PHP file.

 
 
CVE-2022-27133

NVD-CWE-noinfo
 
 
zbzcms v1.0 was discovered to contain an arbitrary file deletion vulnerability via /include/up.php.

 

Copyright 2024, cxsecurity.com

 

Back to Top