Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-19778 State: PUBLISHED Published: 2021-04-14T13:54:43 Last Updated: 2024-08-04T14:15:28.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect Access Control in Shopxo v1.4.0 and v1.5.0 allows remote attackers to gain privileges in "/index.php" by manipulating the parameter "user_id" in the HTML request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gongfuxiang/shopxo/issues/23 - https://cwe.mitre.org/data/definitions/472.html
CVE ID: CVE-2020-19786 State: PUBLISHED Published: 2023-03-23T00:00:00.000Z Last Updated: 2025-02-25T20:47:39.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: File upload vulnerability in CSKaza CSZ CMS v.1.2.2 fixed in v1.2.4 allows attacker to execute aritrary commands and code via crafted PHP file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cskaza/cszcms/issues/20
CVE ID: CVE-2020-19802 State: PUBLISHED Published: 2023-04-11T00:00:00.000Z Last Updated: 2025-02-11T17:26:34.014Z Vendors: n/a Products: n/a Problem Types: n/a Description: File Upload vulnerability found in Milken DoyoCMS v.2.3 allows a remote attacker to execute arbitrary code via the upload file type parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/millken/doyocms
CVE ID: CVE-2020-19803 State: PUBLISHED Published: 2023-04-11T00:00:00.000Z Last Updated: 2025-02-11T17:28:11.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Request Forgery vulnerability found in Milken DoyoCMS v.2.3 allows a remote attacker to execute arbitrary code via the background system settings. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/millken/doyocms - http://wdoyo.com/
CVE ID: CVE-2020-19821 State: PUBLISHED Published: 2021-08-26T02:47:02 Last Updated: 2024-08-04T14:15:28.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in admin.php of DOYOCMS 2.3 allows attackers to execute arbitrary SQL commands via the orders[] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/millken/doyocms/issues/3
CVE ID: CVE-2020-19822 State: PUBLISHED Published: 2021-08-26T02:47:05 Last Updated: 2024-08-04T14:15:28.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: A remote code execution (RCE) vulnerability in template_user.php of ZZCMS version 2018 allows attackers to execute arbitrary PHP code via the "ml" and "title" parameters. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/seabird1992/TEST123/blob/master/071711233468_0zzcms.pdf - https://cwe.mitre.org/data/definitions/96.html
CVE ID: CVE-2020-19824 State: PUBLISHED Published: 2023-02-17T00:00:00.000Z Last Updated: 2025-03-19T14:17:46.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in MPV v.0.29.1 fixed in v0.30 allows attackers to execute arbitrary code and crash program via the ao_c parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/mpv-player/mpv/issues/6808 - https://lists.debian.org/debian-lts-announce/2023/03/msg00009.html
CVE ID: CVE-2020-19825 State: PUBLISHED Published: 2023-02-15T00:00:00.000Z Last Updated: 2025-03-19T18:50:49.758Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in kevinpapst kimai2 1.30.0 in /src/Twig/Runtime/MarkdownExtension.php, allows attackers to gain escalated privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/kevinpapst/kimai2 - https://github.com/kevinpapst/kimai2/pull/962/files
CVE ID: CVE-2020-19850 State: PUBLISHED Published: 2023-04-04T00:00:00.000Z Last Updated: 2025-02-14T18:22:06.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in Directus API v.2.2.0 allows a remote attacker to cause a denial of service via a great amount of HTTP requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/directus/api/issues/982
CVE ID: CVE-2020-19853 State: PUBLISHED Published: 2021-09-07T23:41:33 Last Updated: 2024-08-04T14:15:28.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: BlueCMS v1.6 contains a SQL injection vulnerability via /ad_js.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/p1g3/CVE_REQUEST/blob/master/Sql%20injection%20in%20bluecms%20v1.6.html
CVE ID: CVE-2020-19855 State: PUBLISHED Published: 2021-09-07T23:41:35 Last Updated: 2024-08-04T14:15:28.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpwcms v1.9 contains a cross-site scripting (XSS) vulnerability in /image_zoom.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/p1g3/CVE_REQUEST/blob/master/PHPWCMS%20V1.9%20XSS.html
CVE ID: CVE-2020-19858 State: PUBLISHED Published: 2022-01-21T12:19:25 Last Updated: 2024-08-04T14:15:28.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: Platinum Upnp SDK through 1.2.0 has a directory traversal vulnerability. The attack could remote attack victim by sending http://ip:port/../privacy.avi URL to compromise a victim's privacy. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/plutinosoft/Platinum/issues/22 - https://github.com/plutinosoft/Platinum/commit/9a4ceaccb1585ec35c45fd8e2585538fff6a865e
CVE ID: CVE-2020-19860 State: PUBLISHED Published: 2022-01-21T13:40:44 Last Updated: 2024-08-04T14:15:28.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: When ldns version 1.7.1 verifies a zone file, the ldns_rr_new_frm_str_internal function has a heap out of bounds read vulnerability. An attacker can leak information on the heap by constructing a zone file payload. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/NLnetLabs/ldns/issues/50 - https://github.com/NLnetLabs/ldns/commit/15d96206996bea969fbc918eb0a4a346f514b9f3
CVE ID: CVE-2020-19861 State: PUBLISHED Published: 2022-01-21T14:22:16 Last Updated: 2024-08-04T14:15:28.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: When a zone file in ldns 1.7.1 is parsed, the function ldns_nsec3_salt_data is too trusted for the length value obtained from the zone file. When the memcpy is copied, the 0xfe - ldns_rdf_size(salt_rdf) byte data can be copied, causing heap overflow information leakage. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/NLnetLabs/ldns/issues/51 - https://cwe.mitre.org/data/definitions/126.html
CVE ID: CVE-2020-19877 State: PUBLISHED Published: 2020-08-24T13:44:18 Last Updated: 2024-08-04T14:15:28.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: DBHcms v1.2.0 has a directory traversal vulnerability as there is no directory control function in directory /dbhcms/. A remote unauthenticated attacker can exploit this vulnerability to obtain server-sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fragrant10/cve/tree/master/dbhcms1.2.0#1
CVE ID: CVE-2020-19878 State: PUBLISHED Published: 2020-08-24T14:05:01 Last Updated: 2024-08-04T14:15:28.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: DBHcms v1.2.0 has a sensitive information leaks vulnerability as there is no security access control in /dbhcms/ext/news/ext.news.be.php, A remote unauthenticated attacker can exploit this vulnerability to get path information. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fragrant10/cve/tree/master/dbhcms1.2.0#2
CVE ID: CVE-2020-19879 State: PUBLISHED Published: 2020-08-24T14:08:33 Last Updated: 2024-08-04T14:15:28.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: DBHcms v1.2.0 has a stored xss vulnerability as there is no security filter of $_GET['dbhcms_pid'] variable in dbhcms\page.php line 107, Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fragrant10/cve/tree/master/dbhcms1.2.0#3
CVE ID: CVE-2020-19880 State: PUBLISHED Published: 2020-08-24T14:11:40 Last Updated: 2024-08-04T14:15:28.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: DBHcms v1.2.0 has a stored xss vulnerability as there is no htmlspecialchars function form 'Name' in dbhcms\types.php, A remote unauthenticated attacker can exploit this vulnerability to hijack other users. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fragrant10/cve/tree/master/dbhcms1.2.0#4
CVE ID: CVE-2020-19881 State: PUBLISHED Published: 2020-08-24T14:14:06 Last Updated: 2024-08-04T14:15:28.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: DBHcms v1.2.0 has a reflected xss vulnerability as there is no security filter in dbhcms\mod\mod.selector.php line 108 for $_GET['return_name'] parameter, A remote authenticated with admin user can exploit this vulnerability to hijack other users. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fragrant10/cve/tree/master/dbhcms1.2.0#6
CVE ID: CVE-2020-19882 State: PUBLISHED Published: 2020-08-24T14:22:18 Last Updated: 2024-08-04T14:15:28.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: DBHcms v1.2.0 has a stored xss vulnerability as there is no htmlspecialchars function for 'menu_description' variable in dbhcms\mod\mod.menus.edit.php line 83 and in dbhcms\mod\mod.menus.view.php line 111, A remote authenticated with admin user can exploit this vulnerability to hijack other users. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fragrant10/cve/tree/master/dbhcms1.2.0#7
CVE ID: CVE-2020-19883 State: PUBLISHED Published: 2020-08-24T14:25:16 Last Updated: 2024-08-04T14:15:28.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: DBHcms v1.2.0 has a stored xss vulnerability as there is no security filter in dbhcms\mod\mod.users.view.php line 57 for user_login, A remote authenticated with admin user can exploit this vulnerability to hijack other users. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fragrant10/cve/tree/master/dbhcms1.2.0#5
CVE ID: CVE-2020-19884 State: PUBLISHED Published: 2020-08-24T14:28:19 Last Updated: 2024-08-04T14:15:28.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: DBHcms v1.2.0 has a stored xss vulnerability as there is no htmlspecialchars function in dbhcms\mod\mod.domain.edit.php line 119. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fragrant10/cve/tree/master/dbhcms1.2.0#8
CVE ID: CVE-2020-19885 State: PUBLISHED Published: 2020-08-24T14:30:36 Last Updated: 2024-08-04T14:15:28.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: DBHcms v1.2.0 has a stored xss vulnerability as there is no htmlspecialchars function for '$_POST['pageparam_insert_name']' variable in dbhcms\mod\mod.page.edit.php line 227, A remote authenticated with admin user can exploit this vulnerability to hijack other users. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fragrant10/cve/tree/master/dbhcms1.2.0#9
CVE ID: CVE-2020-19886 State: PUBLISHED Published: 2020-08-24T14:33:44 Last Updated: 2024-08-04T14:15:28.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: DBHcms v1.2.0 has no CSRF protection mechanism,as demonstrated by CSRF for an /index.php?dbhcms_pid=-80&deletemenu=9 can delete any menu. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fragrant10/cve/tree/master/dbhcms1.2.0#12
CVE ID: CVE-2020-19887 State: PUBLISHED Published: 2020-08-24T14:35:49 Last Updated: 2024-08-04T14:15:28.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: DBHcms v1.2.0 has a stored XSS vulnerability as there is no htmlspecialchars function for '$_POST['pageparam_insert_description']' variable in dbhcms\mod\mod.page.edit.php line 227, A remote authenticated with admin user can exploit this vulnerability to hijack other users. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fragrant10/cve/tree/master/dbhcms1.2.0#10
CVE ID: CVE-2020-19888 State: PUBLISHED Published: 2020-08-24T14:38:02 Last Updated: 2024-08-04T14:15:28.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: DBHcms v1.2.0 has an unauthorized operation vulnerability because there's no access control at line 175 of dbhcms\page.php for empty cache operation. This vulnerability can be exploited to empty a table. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fragrant10/cve/tree/master/dbhcms1.2.0#13
CVE ID: CVE-2020-19889 State: PUBLISHED Published: 2020-08-24T14:40:18 Last Updated: 2024-08-04T14:15:28.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: DBHcms v1.2.0 has no CSRF protection mechanism,as demonstrated by CSRF for index.php?dbhcms_pid=-70 can add a user. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fragrant10/cve/tree/master/dbhcms1.2.0#11
CVE ID: CVE-2020-19890 State: PUBLISHED Published: 2020-08-24T14:43:29 Last Updated: 2024-08-04T14:15:28.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: DBHcms v1.2.0 has an Arbitrary file read vulnerability in dbhcms\mod\mod.editor.php $_GET['file'] is filename,and as there is no filter function for security, you can read any file's content. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fragrant10/cve/tree/master/dbhcms1.2.0#15
CVE ID: CVE-2020-19891 State: PUBLISHED Published: 2020-08-24T14:45:55 Last Updated: 2024-08-04T14:15:28.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: DBHcms v1.2.0 has an Arbitrary file write vulnerability in dbhcms\mod\mod.editor.php $_POST['updatefile'] is filename and $_POST['tinymce_content'] is file content, there is no filter function for security. A remote authenticated admin user can exploit this vulnerability to get a webshell. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fragrant10/cve/tree/master/dbhcms1.2.0#14
CVE ID: CVE-2020-19896 State: PUBLISHED Published: 2022-06-28T21:15:52 Last Updated: 2024-08-04T14:15:28.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: File inclusion vulnerability in Minicms v1.9 allows remote attackers to execute arbitary PHP code via post-edit.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bg5sbk/MiniCMS/issues/36
CVE ID: CVE-2020-19897 State: PUBLISHED Published: 2022-06-28T21:19:45 Last Updated: 2024-08-04T14:15:28.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected Cross Site Scripting (XSS) in wuzhicms v4.1.0 allows remote attackers to execute arbitrary web script or HTML via the imgurl parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wuzhicms/wuzhicms/issues/183
CVE ID: CVE-2020-19902 State: PUBLISHED Published: 2023-06-27T00:00:00 Last Updated: 2024-12-04T21:03:56.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Traversal vulnerability found in Cryptoprof WCMS v.0.3.2 allows a remote attacker to execute arbitrary code via the wex/cssjs.php parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/vedees/wcms/issues/3
CVE ID: CVE-2020-19907 State: PUBLISHED Published: 2021-07-12T19:14:39 Last Updated: 2024-08-04T14:15:28.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: A command injection vulnerability in the sandcat plugin of Caldera 2.3.1 and earlier allows authenticated attackers to execute any command or service. Additional Analyst Notes: - CVE Program Container: References: - https://cwe.mitre.org/data/definitions/78.html - https://github.com/mitre/caldera/issues/462
CVE ID: CVE-2020-19909 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-08-04T14:15:28.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow vulnerability in tool_operate.c in curl 7.65.2 via a large value as the retry delay. NOTE: many parties report that this has no direct security impact on the curl user; however, it may (in theory) cause a denial of service to associated systems or networks if, for example, --retry-delay is misinterpreted as a value much smaller than what was intended. This is not especially plausible because the overflow only happens if the user was trying to specify that curl should wait weeks (or longer) before trying to re
the overflow only happens if the user was trying to specify that curl should wait weeks (or longer) before trying to recover from a transient error. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/curl/curl/pull/4166 - https://daniel.haxx.se/blog/2023/08/26/cve-2020-19909-is-everything-that-is-wrong-with-cves/
CVE ID: CVE-2020-19914 State: PUBLISHED Published: 2022-09-07T21:14:42 Last Updated: 2024-08-04T14:15:28.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) in xiunobbs 4.0.4 allows remote attackers to execute arbitrary web script or HTML via the attachment upload function. Additional Analyst Notes: - CVE Program Container: References: - https://kevinoclam.github.io/blog/2019/07/31/xiunobbs-upload/
CVE ID: CVE-2020-19915 State: PUBLISHED Published: 2021-09-20T18:49:53 Last Updated: 2024-08-04T14:15:28.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS vulnerability exists in WUZHI CMS 4.1.0 via the mailbox username in index.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wuzhicms/wuzhicms/issues/173 - https://gist.github.com/feixuezhi/7a1b117e1a4800efb3b6fffe76ca0e97
CVE ID: CVE-2020-19924 State: PUBLISHED Published: 2021-05-18T19:38:07 Last Updated: 2024-08-04T14:15:28.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Boostnote 0.12.1, exporting to PDF contains opportunities for XSS attacks. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/BoostIO/Boostnote/issues/3178
CVE ID: CVE-2020-19947 State: PUBLISHED Published: 2023-03-16T00:00:00.000Z Last Updated: 2025-02-26T16:06:09.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability found in Markdown Edit allows a remote attacker to execute arbitrary code via the edit parameter of the webpage. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/georgeOsdDev/markdown-edit/issues/12
CVE ID: CVE-2020-19949 State: PUBLISHED Published: 2021-09-23T19:46:21 Last Updated: 2024-08-04T14:15:28.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the /link/add.html component of YzmCMS v5.3 allows attackers to execute arbitrary web scripts or HTML. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yzmcms/yzmcms/issues/21
CVE ID: CVE-2020-19950 State: PUBLISHED Published: 2021-09-23T19:46:22 Last Updated: 2024-08-04T14:15:28.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the /banner/add.html component of YzmCMS v5.3 allows attackers to execute arbitrary web scripts or HTML. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yzmcms/yzmcms/issues/22
CVE ID: CVE-2020-19951 State: PUBLISHED Published: 2021-09-23T19:46:23 Last Updated: 2024-08-04T14:15:28.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site request forgery (CSRF) in /controller/pay.class.php of YzmCMS v5.5 allows attackers to access sensitive components of the application. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yzmcms/yzmcms/issues/43
CVE ID: CVE-2020-19952 State: PUBLISHED Published: 2023-08-11T00:00:00 Last Updated: 2024-10-09T19:28:38.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in Rendering Engine in jbt Markdown Editor thru commit 2252418c27dffbb35147acd8ed324822b8919477, allows remote attackers to execute arbirary code via crafted payload or opening malicious .md file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jbt/markdown-editor/issues/106 - https://github.com/jbt/markdown-editor/commit/228f1947a5242a6fbe2995d72d21b7e5f5178f35 - https://github.com/jbt/markdown-editor/pull/110
CVE ID: CVE-2020-19954 State: PUBLISHED Published: 2021-10-14T14:17:37 Last Updated: 2024-08-04T14:15:28.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XML External Entity (XXE) vulnerability was discovered in /api/notify.php in S-CMS 3.0 which allows attackers to read arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zhuxianjin/vuln_repo/blob/master/S-CMS%20v3.0%20XXE%20Arbitrary%20File%20Read%20Vulnerability.md
CVE ID: CVE-2020-19957 State: PUBLISHED Published: 2021-10-14T14:17:34 Last Updated: 2024-08-04T14:15:28.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive data via the id parameter on the /dl/dl_print.php page. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zhuxianjin/vuln_repo/blob/master/zzcms2019%20SQL%20injection%20vulnerability%20in%20dl_print.php.md
CVE ID: CVE-2020-19959 State: PUBLISHED Published: 2021-10-14T14:17:33 Last Updated: 2024-08-04T14:15:28.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive data via the dlid parameter in the /dl/dl_sendmail.php page cookie. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zhuxianjin/vuln_repo/blob/master/zzcms2019%20SQL%20injection%20vulnerability%20in%20dl_sendmail.php.md
CVE ID: CVE-2020-19960 State: PUBLISHED Published: 2021-10-14T14:17:32 Last Updated: 2024-08-04T14:15:28.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive data via the dlid parameter in the /dl/dl_sendsms.php page cookie. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zhuxianjin/vuln_repo/blob/master/zzcms2019%20SQL%20injection%20vulnerability%20in%20dl_sendsms.php.md
CVE ID: CVE-2020-19961 State: PUBLISHED Published: 2021-10-14T14:17:32 Last Updated: 2024-08-04T14:15:28.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive data via the component subzs.php. Additional Analyst Notes: - CVE Program Container: References: - http://zzcms.com - https://github.com/forget-code/zzcms - https://github.com/zhuxianjin/vuln_repo/blob/master/zzcms2019%20SQL%20injection%20vulnerability%20in%20subzs.php.md
CVE ID: CVE-2020-19962 State: PUBLISHED Published: 2021-10-14T14:17:31 Last Updated: 2024-08-04T14:15:28.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the getClientIp function in /lib/tinwin.class.php of Chaoji CMS 2.39, allows attackers to execute arbitrary web scripts. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zhuxianjin/vuln_repo/blob/master/chaojicms_stored_xss.md