Advisories · Technology

ZZCMS.

Every CVE that names ZZCMS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-14837 CVE record

CVSS 5.1 Medium

ZZCMS Backend Website Settings siteconfig.php stripfxg code injection
- ZZCMS
- Other injection
- Code injection
Not analysed yet 17 Dec 2025
CVE-2025-14836 CVE record

CVSS 5.1 Medium

ZZCMS User Data Storage user_save.php cleartext storage in file
- ZZCMS
- Information disclosure
- CWE-313
Not analysed yet 17 Dec 2025
CVE-2025-13171 CVE record

CVSS 5.3 Medium

ZZCMS wangkan_list.php sql injection
- ZZCMS
- Other injection
- SQL injection
Not analysed yet 14 Nov 2025
CVE-2025-1949 CVE record

CVSS 5.3 Medium

ZZCMS URL register_nodb.php cross site scripting
- ZZCMS
- Cross-site scripting (XSS)
- Code injection
Not analysed yet 4 Mar 2025
CVE-2025-0565 CVE record

CVSS 6.9 Medium

ZZCMS index.php sql injection
- ZZCMS
- Other injection
- SQL injection
Not analysed yet 19 Jan 2025
CVE-2024-11242 CVE record

CVSS 5.1 Medium

ZZCMS Keyword Filtering ad_list.php sql injection
- ZZCMS
- Other injection
- SQL injection
Not analysed yet 15 Nov 2024
CVE-2024-11130 CVE record

CVSS 5.1 Medium

ZZCMS msg.php cross site scripting
- ZZCMS
- Cross-site scripting (XSS)
- Code injection
Not analysed yet 12 Nov 2024
CVE-2024-10293 CVE record

CVSS 5.3 Medium

ZZCMS functions.php Ebak_SetGotoPak unrestricted upload
- ZZCMS
- Unrestricted file upload
Not analysed yet 23 Oct 2024
CVE-2024-10292 CVE record

CVSS 5.3 Medium

ZZCMS ChangeTable.php unrestricted upload
- ZZCMS
- Unrestricted file upload
Not analysed yet 23 Oct 2024
CVE-2024-10291 CVE record

CVSS 5.3 Medium

ZZCMS phome.php Ebak_DotranExecutSQL sql injection
- ZZCMS
- SQL injection
Not analysed yet 23 Oct 2024
CVE-2024-10290 CVE record

CVSS 6.9 Medium

ZZCMS inc.php information disclosure
- ZZCMS
- Information disclosure
Not analysed yet 23 Oct 2024
CVE-2024-7927 CVE record

CVSS 6.9 Medium

ZZCMS class.php path traversal
- ZZCMS
- Path traversal
Not analysed yet 19 Aug 2024
CVE-2024-7926 CVE record

CVSS 6.9 Medium

ZZCMS about_edit.php path traversal
- ZZCMS
- Path traversal
Not analysed yet 19 Aug 2024
CVE-2024-7925 CVE record

CVSS 5.3 Medium

ZZCMS eginfo.php information disclosure
- ZZCMS
- Information disclosure
Not analysed yet 19 Aug 2024
CVE-2024-7924 CVE record

CVSS 6.9 Medium

ZZCMS list.php path traversal
- ZZCMS
- Path traversal
Not analysed yet 19 Aug 2024
CVE-2019-1010153 CVE record

zzcms 8.3 and earlier is affected by: SQL Injection.
- zzcms
Not analysed yet 23 Jul 2019
CVE-2019-1010152 CVE record

zzcms 8.3 and earlier is affected by: File Delete to Code Execution.
- zzcms
Not analysed yet 23 Jul 2019
CVE-2019-1010150 CVE record

zzcms 8.3 and earlier is affected by: File Delete to Code Execution.
- zzcms
Not analysed yet 23 Jul 2019
CVE-2019-1010149 CVE record

zzcms version 8.3 and earlier is affected by: File Delete to Code Execution.
- zzcms
Not analysed yet 23 Jul 2019
CVE-2019-1010148 CVE record

zzcms version 8.3 and earlier is affected by: SQL Injection.
- zzcms
Not analysed yet 23 Jul 2019