Lucene search
China National Vulnerability DatabaseCNVD-2021-99763HistoryDec 12, 2021 - 12:00 a.m.
zzcms SQL Injection Vulnerability (CNVD-2021-99763)
2021-12-1200:00:00
China National Vulnerability Database
www.cnvd.org.cn
4
0.001 Low
EPSS
Percentile
37.7%
ZZCMS is a content management system (CMS) from the Zzcms team in China. zzcms is vulnerable to SQL injection, which allows an attacker to use the id parameter in admin/bad.php with a lack of validation for external input SQL statements. An attacker can use the vulnerability to execute illegal SQL commands to steal sensitive database data.
| CPE | Name | Operator | Version |
|---|---|---|---|
| zzcms zzcms | eq | 8.3 | |
| zzcms zzcms | eq | 8.2 |
Related
cvelist
cvelist
CVE-2021-40279
2021-12-09 15:54:43
cve
cve
CVE-2021-40279
2021-12-09 16:15:08
nvd
nvd
CVE-2021-40279
2021-12-09 16:15:08
prion
prion
Sql injection
2021-12-09 16:15:00