thinkphp-zcms

CVEs (2)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2022-28521	Zzcms Zzcms	Cri	0.64	9.8	0.02		Apr 26, 2022	ZCMS v20170206 was discovered to contain a file inclusion vulnerability via index.php?m=home&c=home&a=sp_set_config.
CVE-2020-19705	Thinkphp Thinkphp	Cri	0.64	9.8	0.01		Aug 26, 2021	thinkphp-zcms as of 20190715 allows SQL injection via index.php?m=home&c=message&a=add.

CVE-2022-28521CriApr 26, 2022
Zzcms
Zzcms
risk 0.64cvss 9.8epss 0.02
ZCMS v20170206 was discovered to contain a file inclusion vulnerability via index.php?m=home&c=home&a=sp_set_config.
CVE-2020-19705CriAug 26, 2021
Thinkphp
Thinkphp
risk 0.64cvss 9.8epss 0.01
thinkphp-zcms as of 20190715 allows SQL injection via index.php?m=home&c=message&a=add.