← All advisories

High severity7.2NVD Advisory· Published Dec 9, 2021· Updated Jun 17, 2026

CVE-2021-40280

CVE-2021-40280

Description

An SQL Injection vulnerablitly exits in zzcms 8.2, 8.3, 2020, and 2021 via the id parameter in admin/dl_sendmail.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6

Zzcms/Zzcms5 versions
cpe:2.3:a:zzcms:zzcms:2020:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:zzcms:zzcms:2020:*:*:*:*:*:*:*
- cpe:2.3:a:zzcms:zzcms:2021:*:*:*:*:*:*:*
- cpe:2.3:a:zzcms:zzcms:8.2:*:*:*:*:*:*:*
- cpe:2.3:a:zzcms:zzcms:8.3:*:*:*:*:*:*:*
- (no CPE)range: 8.2, 8.3, 2020, 2021
zzcms/zzcmsdescription

Patches

Vulnerability mechanics

References

1

gist.github.com/aaaahuia/1fd31c1ebcddfe4c95268fa4f31fc312nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.