CVE-2022-27127

MEDIUM

zbzcms v1.0 - SQL Injection via id Parameter at /php/ajax.php

Title source: llm

zbzcms v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php/ajax.php.

Core 1

Core References

Broken Link x_refsource_misc

CVSS v3 6.5

EPSS 0.0068

EPSS Percentile 48.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CWE

CWE-89

Status published

Products (1)

zbzcms/zbzcms 1.0

Published Apr 10, 2022

Tracked Since Feb 18, 2026