← All advisories

High severity7.2NVD Advisory· Published Dec 9, 2021· Updated Jun 17, 2026

CVE-2021-40279

CVE-2021-40279

Description

An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, and 2021 via the id parameter in admin/bad.php.

Affected products

6

Zzcms/Zzcms5 versions
cpe:2.3:a:zzcms:zzcms:2020:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:zzcms:zzcms:2020:*:*:*:*:*:*:*
- cpe:2.3:a:zzcms:zzcms:2021:*:*:*:*:*:*:*
- cpe:2.3:a:zzcms:zzcms:8.2:*:*:*:*:*:*:*
- cpe:2.3:a:zzcms:zzcms:8.3:*:*:*:*:*:*:*
- (no CPE)range: 8.2, 8.3, 2020, 2021
zzcms/zzcmsdescription

Patches

Vulnerability mechanics

References

1

gist.github.com/aaaahuia/b99596c6de9bd6f60e0ddb7bf0bd13c4nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.