VULNERABILITY

CVE search

Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.

403,831 vulnerabilities · 1,768 actively exploited (CISA KEV)

zbzcms ✕Clear filters

7 results

ID	Severity	Summary	Published
CVE-2022-27133	严重9.1	zbzcms v1.0 was discovered to contain an arbitrary file deletion vulnerability via /include/up.php.	10/04/2022
CVE-2022-27131	严重9.8	An arbitrary file upload vulnerability at /zbzedit/php/zbz.php in zbzcms v1.0 allows attackers to execute arbitrary code via a crafted PHP file.	10/04/2022
CVE-2022-27129	严重9.8	An arbitrary file upload vulnerability at /admin/ajax.php in zbzcms v1.0 allows attackers to execute arbitrary code via a crafted PHP file.	10/04/2022
CVE-2022-27128	严重9.8	An incorrect access control issue at /admin/run_ajax.php in zbzcms v1.0 allows attackers to arbitrarily add administrator accounts.