CVE-2025-0565

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in ZZCMS 2023. It has been rated as critical. Affected by this issue is some unknown functionality of the file /index.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74 CWE-89

Affected software

Vendor	Product	Versions
n/a	ZZCMS	2023

References

https://github.com/En0t5/vul/blob/main/zzcms/zzcsm-sql-inject.mdBroken Link, Exploit, Third Party Advisory
https://vuldb.com/?ctiid.292526Permissions Required, VDB Entry
https://vuldb.com/?id.292526Third Party Advisory, VDB Entry
https://vuldb.com/?submit.484333Third Party Advisory, VDB Entry

Timeline

Published: Jan 19, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-05668.8A vulnerability classified as critical has been found in Tenda AC15 15.13.07.13. This affects the function formSetDevNetName of the file /go CVE-2025-05674.5A vulnerability classified as problematic was found in Epic Games Launcher up to 17.2.1. This vulnerability affects unknown code in the libr CVE-2025-05687.5Sante PACS Server DCM File Parsing Memory Corruption Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a CVE-2025-05697.5Sante PACS Server DCM File Parsing Memory Corruption Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a CVE-2025-05706.5Sante PACS Server Web Portal DCM File Parsing Memory Corruption Denial-of-Service Vulnerability. This vulnerability allows remote attackers CVE-2025-05716.5Sante PACS Server Web Portal DCM File Parsing Memory Corruption Denial-of-Service Vulnerability. This vulnerability allows remote attackers CVE-2025-05724.3Sante PACS Server Web Portal DCM File Parsing Directory Traversal Arbitrary File Write Vulnerability. This vulnerability allows remote attac CVE-2025-05735.3Sante PACS Server DCM File Parsing Directory Traversal Arbitrary File Write Vulnerability. This vulnerability allows remote attackers to cre CVE-2025-05747.5Sante PACS Server URL path Memory Corruption Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-CVE-2025-05753.9A vulnerability has been found in Union Bank of India Vyom 8.0.34 on Android and classified as problematic. This vulnerability affects unkno CVE-2025-05764.3A vulnerability was found in Mobotix M15 4.3.4.83 and classified as problematic. This issue affects some unknown processing of the file /con CVE-2025-05774.8An insufficient entropy vulnerability was found in glibc. The getrandom and arc4random family of functions may return predictable randomness