Skip to content
Noroxi

zcms project records

4 published records for vendor zcms project.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 22

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

4 records
  • CVE-2015-7346
    40Plan

    SQL injection vulnerability in ZCMS 1.1.

    CriticalCVSS 9.8Proof of conceptEPSS 4%

    zcms project · zcmsJun 7, 2017

  • CVE-2022-28521
    39Monitor

    ZCMS v20170206 was discovered to contain a file inclusion vulnerability via index.php?m=home&c=home&a=sp_set_config.

    CriticalCVSS 9.8No exploitEPSS 2%

    zcms project · zcmsApr 26, 2022

  • CVE-2022-28522
    21Monitor

    ZCMS v20170206 was discovered to contain a stored cross-site scripting (XSS) vulnerability via index.php?m=home&c=message&a=add.

    MediumCVSS 5.4No exploitEPSS 1%

    zcms project · zcmsApr 26, 2022

  • CVE-2015-7347
    19Monitor

    Cross-site scripting (XSS) vulnerability in ZCMS JavaServer Pages Content Management System 1.1.

    MediumCVSS 4.8Proof of conceptEPSS 1%

    zcms project · zcmsSep 20, 2017