Products: 1
    Vulnerabilities: 7
    Known Exploited: 0
    5
    Critical Level Threats
    0
    High Level Threats
    2
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2022-27125

    zbzcms v1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the neirong parameter at /php/ajax.php.

    Last Modified: Nov 21, 2024
    Published: Apr 10, 2022

    CVE-2022-27126

    zbzcms v1.0 was discovered to contain a SQL injection vulnerability via the art parameter at /include/make.php.

    Last Modified: Nov 21, 2024
    Published: Apr 10, 2022

    CVE-2022-27127

    zbzcms v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php/ajax.php.

    Last Modified: Nov 21, 2024
    Published: Apr 10, 2022

    CVE-2022-27128

    An incorrect access control issue at /admin/run_ajax.php in zbzcms v1.0 allows attackers to arbitrarily add administrator accounts.

    Last Modified: Nov 21, 2024
    Published: Apr 10, 2022

    CVE-2022-27129

    An arbitrary file upload vulnerability at /admin/ajax.php in zbzcms v1.0 allows attackers to execute arbitrary code via a crafted PHP file.

    Last Modified: Nov 21, 2024
    Published: Apr 10, 2022
    Items Per Page
    Zbzcms Vulnerabilities & Security CVEs | CVE-DB