← All advisories

Critical severity9.8NVD Advisory· Published Dec 15, 2021· Updated Jun 17, 2026

CVE-2021-42945

CVE-2021-42945

Description

A SQL Injection vulnerability exists in ZZCMS 2021 via the askbigclassid parameter in /admin/ask.php.

Affected products

3

Zzcms/Zzcms2 versions
cpe:2.3:a:zzcms:zzcms:2021:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:zzcms:zzcms:2021:*:*:*:*:*:*:*
- (no CPE)range: 2021
ZZCMS/ZZCMSdescription

Patches

Vulnerability mechanics

References

2

www.zzcms.netnvdVendor Advisory
github.com/Boomingjacob/ZZCMS/blob/main/4.jpgnvdThird Party Advisory

News mentions

0

No linked articles in our index yet.