5.3 Medium

CVE-2024-7925 A vulnerability was found in ZZCMS 2023

Description

A vulnerability was found in ZZCMS 2023. It has been rated as problematic. This issue affects some unknown processing of the file 3/E_bak5.1/upload/eginfo.php. The manipulation of the argument phome with the input ShowPHPInfo leads to information disclosure. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected products and versions

Product	Affected versions	Fixed in
zzcms	2023	No fix stated
ZZCMS	2023	No fix stated

References

VDB-275111 | ZZCMS eginfo.php information disclosure vuldb.com
VDB-275111 | CTI Indicators (IOB, IOC, TTP, IOA) vuldb.com
Submit #392121 | ZZCMS China Merchants Network Content Management System zzcms 2023 Exposure of Sensitive Information Through Data Queries vuldb.com
gitee.com gitee.com

Timeline

Published August 19, 2024
Last modified September 3, 2024

The 21 CVEs of zzcms →

CVE-2024-52724 ZZCMS 2023 was discovered to contain a SQL injection vulnerability in /q/show.php 9.8 Critical CVE-2024-11242 A vulnerability was found in ZZCMS 2023 5.1 Medium CVE-2024-10293 A vulnerability was found in ZZCMS 2023 5.3 Medium CVE-2024-10292 A vulnerability was found in ZZCMS 2023 and classified as critical 5.3 Medium

Track this CVE

CVE-2024-7925 A vulnerability was found in ZZCMS 2023

Description

Affected products and versions

References

Timeline

Other CVEs of zzcms