zentao 漏洞列表

Zen Tao has a SQL injection vulnerability. Attackers can exploit the vulnerability to obtain sensitive database information.

禅道系统misc-captcha-user.html权限绕过与后台命令执行

ZenTao CMS contains a SQL injection vulnerability. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site.

ZenTao存在SQL注入漏洞，此漏洞是由于接口对用户请求的dbName参数的值验证不当导致的。

【漏洞对象】禅道zentao 【漏洞描述】禅道zentao的block-main.html文件存在sql注入，可造成信息数据泄露，攻击者可利用该漏洞执行SQL指令，甚至入侵服务器。