zzcms kayıtları
zzcms üreticisine ait 107 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 4
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')50
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')17
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')16
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')4
- CWE-434 Unrestricted Upload of File with Dangerous Type3
- CWE-862 Missing Authorization3
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
107 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2020-23426İstismar yok | zzcms 201910 contains an access control vulnerability through escalation of privileges in /user/adv.php, which allows an attacker to modify zzcms · zzcms · CWE-352 | Kritik9,8 | — | %3,7 | 8 Nis 2021 |
40Planlayın | CVE-2019-1010150İstismar yok | zzcms 8.3 and earlier is affected by: File Delete to Code Execution.zzcms · zzcms · CWE-862 | Kritik9,8 | — | %2,4 | 23 Tem 2019 |
40Planlayın | CVE-2019-1010152İstismar yok | zzcms 8.3 and earlier is affected by: File Delete to Code Execution.zzcms · zzcms · CWE-862 | Kritik9,8 | — | %2,4 | 23 Tem 2019 |
40Planlayın | CVE-2019-1010149İstismar yok | zzcms version 8.3 and earlier is affected by: File Delete to Code Execution.zzcms · zzcms · CWE-862 | Kritik9,8 | — | %2,4 | 23 Tem 2019 |
40Planlayın | CVE-2019-1010148İstismar yok | zzcms version 8.3 and earlier is affected by: SQL Injection.zzcms · zzcms · CWE-89 | Kritik9,8 | — | %2,3 | 23 Tem 2019 |
40Planlayın | CVE-2019-1010151İstismar yok | zzcms zzmcms 8.3 and earlier is affected by: File Delete to getshell.zzcms · zzmcms · CWE-22 | Kritik9,8 | — | %2,0 | 19 Tem 2019 |
40Planlayın | CVE-2018-9309İstismar yok | An issue was discovered in zzcms 8.2.zzcms · zzcms · CWE-89 | Kritik9,8 | — | %1,8 | 4 Nis 2018 |
40Planlayın | CVE-2018-8967İstismar yok | An issue was discovered in zzcms 8.2.zzcms · zzcms · CWE-89 | Kritik9,8 | — | %1,8 | 24 Mar 2018 |
40Planlayın | CVE-2021-43703İstismar yok | An Incorrect Access Control vulnerability exists in zzcms less than or equal to 2019 via admin.php.zzcms · zzcms | Kritik9,8 | — | %1,8 | 9 Ara 2021 |
40Planlayın | CVE-2018-14961İstismar yok | dl/dl_sendmail.php in zzcms 8.3 has SQL Injection via the sql parameter.zzcms · zzcms · CWE-89 | Kritik9,8 | — | %1,8 | 6 Ağu 2018 |
40Planlayın | CVE-2023-42398İstismar yok | An issue in zzCMS v.2023 allows a remote attacker to execute arbitrary code and obtain sensitive information via the ueditor component in cozzcms · zzcms · CWE-918 | Kritik9,8 | — | %1,7 | 15 Eyl 2023 |
39İzleyin | CVE-2019-12348İstismar yok | An issue was discovered in zzcms 2019.zzcms · zzcms · CWE-89 | Kritik9,8 | — | %1,7 | 24 May 2021 |
39İzleyin | CVE-2018-18791İstismar yok | An issue was discovered in zzcms 8.3.zzcms · zzcms · CWE-89 | Kritik9,8 | — | %1,5 | 29 Eki 2018 |
39İzleyin | CVE-2019-1010153İstismar yok | zzcms 8.3 and earlier is affected by: SQL Injection.zzcms · zzcms · CWE-89 | Kritik9,8 | — | %1,5 | 23 Tem 2019 |
39İzleyin | CVE-2018-17412İstismar yok | zzcms v8.3 contains a SQL Injection vulnerability in /user/logincheck.php via an X-Forwarded-For HTTP header.zzcms · zzcms · CWE-89 | Kritik9,8 | — | %1,5 | 7 Mar 2019 |
39İzleyin | CVE-2019-12349İstismar yok | An issue was discovered in zzcms 2019.zzcms · zzcms · CWE-89 | Kritik9,8 | — | %1,4 | 2 Haz 2022 |
39İzleyin | CVE-2019-12350İstismar yok | An issue was discovered in zzcms 2019.zzcms · zzcms · CWE-89 | Kritik9,8 | — | %1,4 | 2 Haz 2022 |
39İzleyin | CVE-2019-12351İstismar yok | An issue was discovered in zzcms 2019.zzcms · zzcms · CWE-89 | Kritik9,8 | — | %1,4 | 2 Haz 2022 |
39İzleyin | CVE-2018-18792İstismar yok | An issue was discovered in zzcms 8.3.zzcms · zzcms · CWE-89 | Kritik9,8 | — | %1,2 | 29 Eki 2018 |
39İzleyin | CVE-2018-18789İstismar yok | An issue was discovered in zzcms 8.3.zzcms · zzcms · CWE-89 | Kritik9,8 | — | %1,2 | 29 Eki 2018 |
39İzleyin | CVE-2018-1000653İstismar yok | zzcms version 8.3 and earlier contains a SQL Injection vulnerability in zt/top.php line 5 that can result in could be attacked by sql injectzzcms · zzcms · CWE-89 | Kritik9,8 | — | %1,2 | 20 Ağu 2018 |
39İzleyin | CVE-2018-18787İstismar yok | An issue was discovered in zzcms 8.3.zzcms · zzcms · CWE-89 | Kritik9,8 | — | %1,2 | 29 Eki 2018 |
39İzleyin | CVE-2018-18786İstismar yok | An issue was discovered in zzcms 8.3.zzcms · zzcms · CWE-89 | Kritik9,8 | — | %1,2 | 29 Eki 2018 |
39İzleyin | CVE-2018-18785İstismar yok | An issue was discovered in zzcms 8.3.zzcms · zzcms · CWE-89 | Kritik9,8 | — | %1,2 | 29 Eki 2018 |
39İzleyin | CVE-2018-17136İstismar yok | zzcms 8.3 contains a SQL Injection vulnerability in /user/check.php via a Client-Ip HTTP header.zzcms · zzcms · CWE-89 | Kritik9,8 | — | %1,2 | 17 Eyl 2018 |
- CVE-2020-2342640Planlayın
zzcms 201910 contains an access control vulnerability through escalation of privileges in /user/adv.php, which allows an attacker to modify
KritikCVSS 9,8İstismar yokEPSS %4zzcms · zzcms8 Nis 2021
- CVE-2019-101015040Planlayın
zzcms 8.3 and earlier is affected by: File Delete to Code Execution.
KritikCVSS 9,8İstismar yokEPSS %2zzcms · zzcms23 Tem 2019
- CVE-2019-101015240Planlayın
zzcms 8.3 and earlier is affected by: File Delete to Code Execution.
KritikCVSS 9,8İstismar yokEPSS %2zzcms · zzcms23 Tem 2019
- CVE-2019-101014940Planlayın
zzcms version 8.3 and earlier is affected by: File Delete to Code Execution.
KritikCVSS 9,8İstismar yokEPSS %2zzcms · zzcms23 Tem 2019
- CVE-2019-101014840Planlayın
zzcms version 8.3 and earlier is affected by: SQL Injection.
KritikCVSS 9,8İstismar yokEPSS %2zzcms · zzcms23 Tem 2019
- CVE-2019-101015140Planlayın
zzcms zzmcms 8.3 and earlier is affected by: File Delete to getshell.
KritikCVSS 9,8İstismar yokEPSS %2zzcms · zzmcms19 Tem 2019
- CVE-2018-930940Planlayın
An issue was discovered in zzcms 8.2.
KritikCVSS 9,8İstismar yokEPSS %2zzcms · zzcms4 Nis 2018
- CVE-2018-896740Planlayın
An issue was discovered in zzcms 8.2.
KritikCVSS 9,8İstismar yokEPSS %2zzcms · zzcms24 Mar 2018
- CVE-2021-4370340Planlayın
An Incorrect Access Control vulnerability exists in zzcms less than or equal to 2019 via admin.php.
KritikCVSS 9,8İstismar yokEPSS %2zzcms · zzcms9 Ara 2021
- CVE-2018-1496140Planlayın
dl/dl_sendmail.php in zzcms 8.3 has SQL Injection via the sql parameter.
KritikCVSS 9,8İstismar yokEPSS %2zzcms · zzcms6 Ağu 2018
- CVE-2023-4239840Planlayın
An issue in zzCMS v.2023 allows a remote attacker to execute arbitrary code and obtain sensitive information via the ueditor component in co
KritikCVSS 9,8İstismar yokEPSS %2zzcms · zzcms15 Eyl 2023
- CVE-2019-1234839İzleyin
An issue was discovered in zzcms 2019.
KritikCVSS 9,8İstismar yokEPSS %2zzcms · zzcms24 May 2021
- CVE-2018-1879139İzleyin
An issue was discovered in zzcms 8.3.
KritikCVSS 9,8İstismar yokEPSS %2zzcms · zzcms29 Eki 2018
- CVE-2019-101015339İzleyin
zzcms 8.3 and earlier is affected by: SQL Injection.
KritikCVSS 9,8İstismar yokEPSS %2zzcms · zzcms23 Tem 2019
- CVE-2018-1741239İzleyin
zzcms v8.3 contains a SQL Injection vulnerability in /user/logincheck.php via an X-Forwarded-For HTTP header.
KritikCVSS 9,8İstismar yokEPSS %2zzcms · zzcms7 Mar 2019
- CVE-2019-1234939İzleyin
An issue was discovered in zzcms 2019.
KritikCVSS 9,8İstismar yokEPSS %1zzcms · zzcms2 Haz 2022
- CVE-2019-1235039İzleyin
An issue was discovered in zzcms 2019.
KritikCVSS 9,8İstismar yokEPSS %1zzcms · zzcms2 Haz 2022
- CVE-2019-1235139İzleyin
An issue was discovered in zzcms 2019.
KritikCVSS 9,8İstismar yokEPSS %1zzcms · zzcms2 Haz 2022
- CVE-2018-1879239İzleyin
An issue was discovered in zzcms 8.3.
KritikCVSS 9,8İstismar yokEPSS %1zzcms · zzcms29 Eki 2018
- CVE-2018-1878939İzleyin
An issue was discovered in zzcms 8.3.
KritikCVSS 9,8İstismar yokEPSS %1zzcms · zzcms29 Eki 2018
- CVE-2018-100065339İzleyin
zzcms version 8.3 and earlier contains a SQL Injection vulnerability in zt/top.php line 5 that can result in could be attacked by sql inject
KritikCVSS 9,8İstismar yokEPSS %1zzcms · zzcms20 Ağu 2018
- CVE-2018-1878739İzleyin
An issue was discovered in zzcms 8.3.
KritikCVSS 9,8İstismar yokEPSS %1zzcms · zzcms29 Eki 2018
- CVE-2018-1878639İzleyin
An issue was discovered in zzcms 8.3.
KritikCVSS 9,8İstismar yokEPSS %1zzcms · zzcms29 Eki 2018
- CVE-2018-1878539İzleyin
An issue was discovered in zzcms 8.3.
KritikCVSS 9,8İstismar yokEPSS %1zzcms · zzcms29 Eki 2018
- CVE-2018-1713639İzleyin
zzcms 8.3 contains a SQL Injection vulnerability in /user/check.php via a Client-Ip HTTP header.
KritikCVSS 9,8İstismar yokEPSS %1zzcms · zzcms17 Eyl 2018