CVE-2015-7347

概要

参考情報

• packetstormsecurity.com/files/132286/ZCMS-1.1-Cross-Site-Scripting-SQL-Injection.html · Exploit
• exploit-db.com/exploits/37272 · Exploit

zcms のその他の脆弱性

• CVE-2022-28522中 5.4ZCMS v20170206 was discovered to contain a stored cross-site scripting (XSS) vulnerability via index.php?m=home&c=message&a=add.
• CVE-2022-28521緊急 9.8ZCMS v20170206 was discovered to contain a file inclusion vulnerability via index.php?m=home&c=home&a=sp_set_config.
• CVE-2015-7346緊急 9.8SQL injection vulnerability in ZCMS 1.1.