CVE-2015-7346

Description

References

• hyp3rlinx.altervista.org/advisories/AS-ZCMS0612.txt · Exploit
• packetstormsecurity.com/files/132286/ZCMS-1.1-Cross-Site-Scripting-SQL-Injection.html · Exploit
• exploit-db.com/exploits/37272 · Exploit

zcms 的其他漏洞

• CVE-2022-28522中危 5.4ZCMS v20170206 was discovered to contain a stored cross-site scripting (XSS) vulnerability via index.php?m=home&c=message&a=add.
• CVE-2022-28521严重 9.8ZCMS v20170206 was discovered to contain a file inclusion vulnerability via index.php?m=home&c=home&a=sp_set_config.
• CVE-2015-7347中危 4.8Cross-site scripting (XSS) vulnerability in ZCMS JavaServer Pages Content Management System 1.1.