Approved changes feed: RSS · Atom

cpe:2.3:a:zzcms:zzcms:2019:*:*:*:*:*:*:*

part: a version: 2019 update: *

VendorZzcms (a8ce74bc-548a-5d48-9b41-aa14735b7436)
ProductZzcms (b57699cb-8835-5a0c-8368-6645f2c2dd42)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/forget-code/zzcms purl2cpe 2026-06-01 10:16:30.246568

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-20285 vulnerable 2026-06-08 05:21:03.983946 Details available
There is a XSS in the user login page in zzcms 2019. Users can inject js code by the referer header via user/login.php
Published: 2020-12-18T18:20:33.000Z
Updated: 2024-08-04T14:15:28.821Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-19961 vulnerable 2026-06-08 05:20:57.494805 Details available
A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive data via the component subzs.php.
Published: 2021-10-14T14:17:32.000Z
Updated: 2026-07-09T00:09:39.574Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-19960 vulnerable 2026-06-08 05:20:57.494322 Details available
A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive data via the dlid parameter in the /dl/dl_sendsms.php page cookie.
Published: 2021-10-14T14:17:32.000Z
Updated: 2024-08-04T14:15:28.455Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-19959 vulnerable 2026-06-08 05:20:57.493999 Details available
A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive data via the dlid parameter in the /dl/dl_sendmail.php page cookie.
Published: 2021-10-14T14:17:33.000Z
Updated: 2024-08-04T14:15:28.608Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-19957 vulnerable 2026-06-08 05:20:57.493527 Details available
A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive data via the id parameter on the /dl/dl_print.php page.
Published: 2021-10-14T14:17:34.000Z
Updated: 2024-08-04T14:15:28.612Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-19042 vulnerable 2026-06-08 05:20:57.163588 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-9078 vulnerable 2026-06-08 05:14:24.959691 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-12359 vulnerable 2026-06-08 05:12:38.956441 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-12358 vulnerable 2026-06-08 05:12:38.956077 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-12357 vulnerable 2026-06-08 05:12:38.955813 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-12356 vulnerable 2026-06-08 05:12:38.955555 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-12355 vulnerable 2026-06-08 05:12:38.955195 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-12354 vulnerable 2026-06-08 05:12:38.954934 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-12353 vulnerable 2026-06-08 05:12:38.954666 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-12352 vulnerable 2026-06-08 05:12:38.954390 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-12351 vulnerable 2026-06-08 05:12:38.954099 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-12350 vulnerable 2026-06-08 05:12:38.953808 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-12349 vulnerable 2026-06-08 05:12:38.953391 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-12348 vulnerable 2026-06-08 05:12:38.953001 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.