CVE-2014-4034

Description

References

• packetstormsecurity.com/files/127005/ZeroCMS-1.0-SQL-Injection.html · Exploit
• packetstormsecurity.com/files/130192/ZeroCMS-1.3.3-SQL-Injection.html · Exploit
• seclists.org/fulldisclosure/2015/Feb/4 · Mailing List
• seclists.org/oss-sec/2015/q1/379 · Mailing List
• seclists.org/oss-sec/2015/q1/380 · Mailing List
• secunia.com/advisories/59182
• sroesemann.blogspot.de/2015/01/report-for-advisory-sroeadv-2015-14.html · Not Applicable
• sroesemann.blogspot.de/2015/01/sroeadv-2015-13.html · Not Applicable
• sroesemann.blogspot.de/2015/02/addition-for-advisory-sroeadv-2015-14.html · Not Applicable
• exploit-db.com/exploits/33702 · Exploit
• securityfocus.com/bid/67953 · Not Applicable
• zeroscience.mk/en/vulnerabilities/ZSL-2014-5186.php · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/100588

zerocms 的其他漏洞

• CVE-2015-1442高危 7.5SQL injection vulnerability in views/zero_transact_user.php in the administrative backend in ZeroCMS 1.3.3, 1.3.2, and earlier allows remote…
• CVE-2014-4710中危 4.3Cross-site scripting (XSS) vulnerability in zero_user_account.php in ZeroCMS 1.0 allows remote attackers to inject arbitrary web script or H…
• CVE-2014-4194高危 7.5SQL injection vulnerability in zero_transact_article.php in ZeroCMS 1.0 allows remote attackers to execute arbitrary SQL commands via the ar…
• CVE-2014-4195中危 4.3Cross-site scripting (XSS) vulnerability in zero_view_article.php in ZeroCMS 1.0 allows remote attackers to inject arbitrary web script or H…