6.9 Moyenne

CVE-2024-7927 A vulnerability classified as critical was found in ZZCMS 2023

Description

A vulnerability classified as critical was found in ZZCMS 2023. Affected by this vulnerability is an unknown functionality of the file /admin/class.php?dowhat=modifyclass. The manipulation of the argument skin[] leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
zzcms	2023	Pas de correctif indiqué
ZZCMS	2023	Pas de correctif indiqué

Références

VDB-275113 | ZZCMS class.php path traversal vuldb.com
VDB-275113 | CTI Indicators (IOB, IOC, TTP, IOA) vuldb.com
Submit #392186 | ZZCMS China Merchants Network Content Management System zzcms 2023 Unauthenticated Arbitrary File Read vuldb.com
gitee.com gitee.com

Chronologie

Publiée 19 août 2024
Dernière modification 20 août 2024

Les 21 CVE de zzcms →

CVE-2024-52724 ZZCMS 2023 was discovered to contain a SQL injection vulnerability in /q/show.php 9.8 Critique CVE-2024-11242 A vulnerability was found in ZZCMS 2023 5.1 Moyenne CVE-2024-10293 A vulnerability was found in ZZCMS 2023 5.3 Moyenne CVE-2024-10292 A vulnerability was found in ZZCMS 2023 and classified as critical 5.3 Moyenne

Suivre cette CVE

CVE-2024-7927 A vulnerability classified as critical was found in ZZCMS 2023

Description

Produits et versions touchés

Références

Chronologie

Autres CVE de zzcms