← All advisories

High severity8.8NVD Advisory· Published Dec 9, 2021· Updated Jun 17, 2026

CVE-2021-40282

CVE-2021-40282

Description

An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, abd 2021 in dl/dl_download.php. when registering ordinary users.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6

Zzcms/Zzcms5 versions
cpe:2.3:a:zzcms:zzcms:2020:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:zzcms:zzcms:2020:*:*:*:*:*:*:*
- cpe:2.3:a:zzcms:zzcms:2021:*:*:*:*:*:*:*
- cpe:2.3:a:zzcms:zzcms:8.2:*:*:*:*:*:*:*
- cpe:2.3:a:zzcms:zzcms:8.3:*:*:*:*:*:*:*
- (no CPE)range: 8.2, 8.3, 2020, 2021
zzcms/zzcmsdescription

Patches

Vulnerability mechanics

References

1

gist.github.com/aaaahuia/1343e3aa06b031ea621b5701cebcee3envdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.