Description 【漏洞对象】ZZcms开源招商网 【涉及版本】ZZcms CMS 8.3 【漏洞描述】ZZcms开源招商网CMS系统8.3版本前台存在sql注入,可能造成数据泄露,甚至服务器被入侵。
Related VulnerabilitiesPoCCVE-2019-10647: ZZZCMS ZZZPHP 1.6.3 – Remote PHP Code Execution (RCE)zcms-v3-sqli: zcms v3 sqlizzcms-zsmanage-sqli: ZzCMS zsmanage sqliZZZCMS /search/ 代码执行漏洞(CVE-2019-9041)PoCCVE-2019-9041: ZZZCMS 1.6.1 - Remote Code ExecutionPoCCVE-2020-20285: ZZcms - Cross-Site ScriptingPoCCVE-2022-23881: ZZZCMS zzzphp 2.1.0 - Remote Code ExecutionPoCCVE-2022-40443: ZZCMS 2022 - Path Information DisclosurePoCzzzcms-parser-search-rce: ZZZCMS parserSearch 远程命令执行漏洞PoCzcms-v3-sqli: ZCMS - SQL InjectionPoCzzcms-register-xss: Zzcms `register_nodb.php` - Cross Site ScriptingPoCzzcms-xss: ZZCMS - Cross-Site Scripting