6.9 Medium

CVE-2024-7924 A vulnerability was found in ZZCMS 2023

Description

A vulnerability was found in ZZCMS 2023. It has been declared as critical. This vulnerability affects unknown code of the file /I/list.php. The manipulation of the argument skin leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected products and versions

Product	Affected versions	Fixed in
zzcms	2023	No fix stated
ZZCMS	2023	No fix stated

References

VDB-275110 | ZZCMS list.php path traversal vuldb.com
VDB-275110 | CTI Indicators (IOB, IOC, TTP, IOA) vuldb.com
Submit #391876 | ZZCMS China Merchants Network Content Management System zzcms 2023 Unauthenticated Arbitrary File Read vuldb.com
gitee.com gitee.com

Timeline

Published August 19, 2024
Last modified August 21, 2024

The 21 CVEs of zzcms →

CVE-2024-52724 ZZCMS 2023 was discovered to contain a SQL injection vulnerability in /q/show.php 9.8 Critical CVE-2024-11242 A vulnerability was found in ZZCMS 2023 5.1 Medium CVE-2024-10293 A vulnerability was found in ZZCMS 2023 5.3 Medium CVE-2024-10292 A vulnerability was found in ZZCMS 2023 and classified as critical 5.3 Medium

Track this CVE

CVE-2024-7924 A vulnerability was found in ZZCMS 2023

Description

Affected products and versions

References

Timeline

Other CVEs of zzcms