SQL Injection

Every one of the 53 is a mark on the map. Named now: 1 to 26, most at risk first.

1. zzcms version 8.3 and earlier is affected by: SQL Injection. The impact is: zzcms File Delete to Code Execution.CVE-2019-1010148zzcms · 2.3% likely

   CWE-89

2. An issue was discovered in zzcms 8.2. It allows SQL injection via the id parameter in a dl/dl_sendsms.php request.CVE-2018-9309Zzcms · 1.8% likely

   CWE-89

3. An issue was discovered in zzcms 8.2. It allows SQL injection via the id parameter in an adv2.php?action=modify request.CVE-2018-8967Zzcms · 1.8% likely

   CWE-89

4. dl/dl_sendmail.php in zzcms 8.3 has SQL Injection via the sql parameter.CVE-2018-14961Zzcms · 1.8% likely

   CWE-89

5. A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive data via the component subzs.php.CVE-2020-19961Zzcms · 1.7% likely

   CWE-89

6. An issue was discovered in zzcms 2019. SQL Injection exists in user/ztconfig.php via the daohang or img POST parameter.CVE-2019-12348Zzcms · 1.7% likely

   CWE-89

7. zzcms 8.3 and earlier is affected by: SQL Injection. The impact is: sql inject. The component is: zs/subzs.php.CVE-2019-1010153zzcms · 1.5% likely

   CWE-89

8. An issue was discovered in zzcms 8.3. SQL Injection exists in zs/search.php via a pxzs cookie.CVE-2018-18791Zzcms · 1.5% likely

   CWE-89

9. zzcms v8.3 contains a SQL Injection vulnerability in /user/logincheck.php via an X-Forwarded-For HTTP header.CVE-2018-17412Zzcms · 1.5% likely

   CWE-89

10. A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive data via the dlid parameter in the /dl/dl_sendsms.php page co…CVE-2020-19960Zzcms · 1.5% likely

    CWE-89

11. A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive data via the dlid parameter in the /dl/dl_sendmail.php page c…CVE-2020-19959Zzcms · 1.5% likely

    CWE-89

12. A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive data via the id parameter on the /dl/dl_print.php page.CVE-2020-19957Zzcms · 1.5% likely

    CWE-89

13. ZZCMS index.php sql injectionCVE-2025-0565Zzcms · CVSS 7.3 · 1.5% likely

    CWE-89

14. An issue was discovered in zzcms 2019. SQL Injection exists in dl/dl_print.php via an id parameter value with a trailing comma.CVE-2019-12351Zzcms · 1.4% likely

    CWE-89

15. An issue was discovered in zzcms 2019. SQL Injection exists in dl/dl_download.php via an id parameter value with a trailing comma.CVE-2019-12350Zzcms · 1.4% likely

    CWE-89

16. An issue was discovered in zzcms 2019. SQL Injection exists in /admin/dl_sendsms.php via the id parameter.CVE-2019-12349Zzcms · 1.4% likely

    CWE-89

17. A SQL injection vulnerability exists in zzcms v8.3 via the /admin/adclass.php bigclassid parameter.CVE-2018-17416Zzcms · 1.3% likely

    CWE-89

18. zzcms V8.3 has a SQL injection in /user/zs_elite.php via the id parameter.CVE-2018-17415Zzcms · 1.3% likely

    CWE-89

19. zzcms v8.3 has a SQL injection in /user/jobmanage.php via the bigclass parameter.CVE-2018-17414Zzcms · 1.3% likely

    CWE-89

20. A blind SQL injection vulnerability exists in zzcms ver201910 based on time (cookie injection).CVE-2020-23630Zzcms · 1.2% likely

    CWE-89

21. An issue was discovered in zzcms 8.3. SQL Injection exists in zs/zs_list.php via a pxzs cookie.CVE-2018-18792Zzcms · 1.2% likely

    CWE-89

22. An issue was discovered in zzcms 8.3. SQL Injection exists in zt/top.php via a Host HTTP header to zt/news.php.CVE-2018-18789Zzcms · 1.2% likely

    CWE-89

23. An issue was discovered in zzcms 8.3. SQL Injection exists in zs/zs.php via a pxzs cookie.CVE-2018-18787Zzcms · 1.2% likely

    CWE-89

24. An issue was discovered in zzcms 8.3. SQL Injection exists in ajax/zs.php via a pxzs cookie.CVE-2018-18786Zzcms · 1.2% likely

    CWE-89

25. An issue was discovered in zzcms 8.3. SQL Injection exists in zs/subzs.php with a zzcmscpid cookie to zs/search.php.CVE-2018-18785Zzcms · 1.2% likely

    CWE-89

26. zzcms 8.3 contains a SQL Injection vulnerability in /user/check.php via a Client-Ip HTTP header.CVE-2018-17136Zzcms · 1.2% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.