VULNERABILITY

CVE search

Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.

403,890 vulnerabilities · 1,768 actively exploited (CISA KEV)

zbzcms ✕Clear filters

7 results

ID	Severity	Summary	Published
CVE-2022-27133	심각9.1	zbzcms v1.0 was discovered to contain an arbitrary file deletion vulnerability via /include/up.php.	10/04/2022
CVE-2022-27131	심각9.8	An arbitrary file upload vulnerability at /zbzedit/php/zbz.php in zbzcms v1.0 allows attackers to execute arbitrary code via a crafted PHP file.	10/04/2022
CVE-2022-27129	심각9.8	An arbitrary file upload vulnerability at /admin/ajax.php in zbzcms v1.0 allows attackers to execute arbitrary code via a crafted PHP file.	10/04/2022
CVE-2022-27128	심각9.8	An incorrect access control issue at /admin/run_ajax.php in zbzcms v1.0 allows attackers to arbitrarily add administrator accounts.