GCVE - cpe:2.3:a:n/a:zzcms:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:zzcms:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	N/A (`22f567d3-1203-528c-8f0e-3eb9c2f6ca78`)
Product	Zzcms (`29f1a63b-61dd-57d5-96bf-751383676e7e`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-1949`	vulnerable	2026-06-08 07:08:38.513216	ZZCMS URL register_nodb.php cross site scripting MEDIUM (4.3) A vulnerability, which was classified as problematic, has been found in ZZCMS 2025. This issue affects some unknown processing of the file /3/ucenter_api/code/register_nodb.php of the component URL Handler. The manipulation of the argument $_SERVER['PHP_SELF'] leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Published: 2025-03-04T19:00:07.588Z Updated: 2025-03-04T19:37:04.767Z Open on db.gcve.eu Reference links https://vuldb.com/?id.298541 https://vuldb.com/?ctiid.298541 https://vuldb.com/?submit.508909 https://github.com/Sinon2003/cve/blob/main/zzcms/xss-register_nodb.php.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-0565`	vulnerable	2026-06-08 07:02:24.864169	ZZCMS index.php sql injection HIGH (7.3) A vulnerability was found in ZZCMS 2023. It has been rated as critical. Affected by this issue is some unknown functionality of the file /index.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Published: 2025-01-19T06:00:18.955Z Updated: 2025-01-21T15:13:00.335Z Open on db.gcve.eu Reference links https://vuldb.com/?id.292526 https://vuldb.com/?ctiid.292526 https://vuldb.com/?submit.484333 https://github.com/En0t5/vul/blob/main/zzcms/zzcsm-sql-inject.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-7927`	vulnerable	2026-06-08 06:58:23.969290	ZZCMS class.php path traversal HIGH (7.3) A vulnerability classified as critical was found in ZZCMS 2023. Affected by this vulnerability is an unknown functionality of the file /admin/class.php?dowhat=modifyclass. The manipulation of the argument skin[] leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Published: 2024-08-19T20:00:10.055Z Updated: 2024-08-20T14:00:45.623Z Open on db.gcve.eu Reference links https://vuldb.com/?id.275113 https://vuldb.com/?ctiid.275113 https://vuldb.com/?submit.392186 https://gitee.com/A0kooo/cve_article/blob/master/zzcms/Directory_traversal3/zzcms%20class.php%20Directory%20traversal.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-7926`	vulnerable	2026-06-08 06:58:23.968685	ZZCMS about_edit.php path traversal HIGH (7.3) A vulnerability classified as critical has been found in ZZCMS 2023. Affected is an unknown function of the file /admin/about_edit.php?action=modify. The manipulation of the argument skin leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Published: 2024-08-19T19:31:08.434Z Updated: 2024-08-20T14:06:06.946Z Open on db.gcve.eu Reference links https://vuldb.com/?id.275112 https://vuldb.com/?ctiid.275112 https://vuldb.com/?submit.392181 https://gitee.com/A0kooo/cve_article/blob/master/zzcms/Directory_traversal2/zzcms%20siteinfo.php%20Directory%20traversal.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-7925`	vulnerable	2026-06-08 06:58:23.967842	ZZCMS eginfo.php information disclosure MEDIUM (4.3) A vulnerability was found in ZZCMS 2023. It has been rated as problematic. This issue affects some unknown processing of the file 3/E_bak5.1/upload/eginfo.php. The manipulation of the argument phome with the input ShowPHPInfo leads to information disclosure. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Published: 2024-08-19T18:00:15.442Z Updated: 2024-09-03T17:24:33.860Z Open on db.gcve.eu Reference links https://vuldb.com/?id.275111 https://vuldb.com/?ctiid.275111 https://vuldb.com/?submit.392121 https://gitee.com/A0kooo/cve_article/blob/master/zzcms/information_leak/Zenmus%20ekinfo.php%20had%20an%20information%20leak.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-7924`	vulnerable	2026-06-08 06:58:23.966075	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-11242`	vulnerable	2026-06-08 06:23:49.169719	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-11130`	vulnerable	2026-06-08 06:23:48.831825	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-10293`	vulnerable	2026-06-08 06:22:03.963654	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-10292`	vulnerable	2026-06-08 06:22:03.963020	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-10291`	vulnerable	2026-06-08 06:22:03.962335	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-10290`	vulnerable	2026-06-08 06:22:03.959948	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Zzcms

Notes

PURL mappings

Vulnerability references

Contribute