ZhiCms vulnerabilities
We track 3 vulnerabilities in ZhiCms products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on March 21, 2024.
Latest ZhiCms vulnerabilities
- 8.8 High severity
ZhiCms: Improper Control of Generation of Code
A vulnerability, which was classified as critical, was found in ZhiCms 4.0. Affected is the function index of the file app/manage/controller/setcontroller.php. The manipulation of the argument sitename leads to code injection. It is possible to launch the atta
- 8.8 High severity
ZhiCms: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in ZhiCms 4.0. This issue affects the function getindexdata of the file app/index/controller/mcontroller.php. The manipulation of the argument key leads to sql injection. The attack may be initi
- 9.8 Critical severity
ZhiCms: Deserialization of Untrusted Data
A vulnerability classified as critical has been found in ZhiCms up to 4.0. This affects an unknown part of the file app/plug/controller/giftcontroller.php. The manipulation of the argument mylike leads to deserialization. It is possible to initiate the attack