6.9 Medium

CVE-2024-7927 A vulnerability classified as critical was found in ZZCMS 2023

Description

A vulnerability classified as critical was found in ZZCMS 2023. Affected by this vulnerability is an unknown functionality of the file /admin/class.php?dowhat=modifyclass. The manipulation of the argument skin[] leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Affected products and versions

Product	Affected versions	Fixed in
zzcms	2023	No fix stated
ZZCMS	2023	No fix stated

References

VDB-275113 | ZZCMS class.php path traversal vuldb.com
VDB-275113 | CTI Indicators (IOB, IOC, TTP, IOA) vuldb.com
Submit #392186 | ZZCMS China Merchants Network Content Management System zzcms 2023 Unauthenticated Arbitrary File Read vuldb.com
gitee.com gitee.com

Timeline

Published August 19, 2024
Last modified August 20, 2024

The 21 CVEs of zzcms →

CVE-2024-52724 ZZCMS 2023 was discovered to contain a SQL injection vulnerability in /q/show.php 9.8 Critical CVE-2024-11242 A vulnerability was found in ZZCMS 2023 5.1 Medium CVE-2024-10293 A vulnerability was found in ZZCMS 2023 5.3 Medium CVE-2024-10292 A vulnerability was found in ZZCMS 2023 and classified as critical 5.3 Medium

Track this CVE

CVE-2024-7927 A vulnerability classified as critical was found in ZZCMS 2023

Description

Affected products and versions

References

Timeline

Other CVEs of zzcms