Skip to content
Sign in
7.3 High

CVE-2024-0603 A vulnerability classified as critical has been found in ZhiCms up to 4.0

Description

A vulnerability classified as critical has been found in ZhiCms up to 4.0. This affects an unknown part of the file app/plug/controller/giftcontroller.php. The manipulation of the argument mylike leads to deserialization. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-250839.

Affected products and versions

Product Affected versions Fixed in
ZhiCms 4.0 No fix stated

Other CVEs of ZhiCms

The 3 CVEs of ZhiCms →
CVE-2024-2016 A vulnerability, which was classified as critical, was found in ZhiCms 4.0 6.3 Medium CVE-2024-2015 A vulnerability, which was classified as critical, has been found in ZhiCms 4.0 6.3 Medium
Track this CVE