Zbzcms

zbzcms

Vendor: Zbzcms • 7 CVEs

CVEs (7)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-27133 1Zbzcms 1Zbzcms Jun 17, 2026 Apr 10, 2022 N/A· v4 9.1 CRITICAL· v3 6.4 MEDIUM· v2 zbzcms v1.0 was discovered to contain an arbitrary file deletion vulnerability via /include/up.php.
CVE-2022-27131 1Zbzcms 1Zbzcms Jun 17, 2026 Apr 10, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An arbitrary file upload vulnerability at /zbzedit/php/zbz.php in zbzcms v1.0 allows attackers to execute arbitrary code via a crafted PHP file.
CVE-2022-27129 1Zbzcms 1Zbzcms Jun 17, 2026 Apr 10, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An arbitrary file upload vulnerability at /admin/ajax.php in zbzcms v1.0 allows attackers to execute arbitrary code via a crafted PHP file.
CVE-2022-27128 1Zbzcms 1Zbzcms Jun 17, 2026 Apr 10, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An incorrect access control issue at /admin/run_ajax.php in zbzcms v1.0 allows attackers to arbitrarily add administrator accounts.
CVE-2022-27127 1Zbzcms 1Zbzcms Jun 17, 2026 Apr 10, 2022 N/A· v4 6.5 MEDIUM· v3 6.4 MEDIUM· v2 zbzcms v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php/ajax.php.
CVE-2022-27126 1Zbzcms 1Zbzcms Jun 17, 2026 Apr 10, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 zbzcms v1.0 was discovered to contain a SQL injection vulnerability via the art parameter at /include/make.php.
CVE-2022-27125 1Zbzcms 1Zbzcms Jun 17, 2026 Apr 10, 2022 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 zbzcms v1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the neirong parameter at /php/ajax.php.