CVE-2018-1000653 - zzcms version 8.3 and earlier contains a SQL Injection vulnerability in zt/top.php line 5 that can result in could be attacked by sql injection in zzcms in nginx

Back Back to CVE browser

CRITICAL

zzcms version 8.3 and earlier contains a SQL Injection vulnerability in zt/top.php line 5 that can result in could be attacked by sql injection in zzcms in nginx

Published Aug 20, 2018

9.8

CRITICAL

CVSS 3.0

EPSS 1.20%

Description

zzcms version 8.3 and earlier contains a SQL Injection vulnerability in zt/top.php line 5 that can result in could be attacked by sql injection in zzcms in nginx. This attack appear to be exploitable via running zzcms in nginx.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-1984
Advisory
https://gist.github.com/Lz1y/3388fa886a3e10edd2a7e93d3c3e5b6c
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-1984		Advisory
https://gist.github.com/Lz1y/3388fa886a3e10edd2a7e93d3c3e5b6c		x_refsource_MISCExploitThird Party Advisory