CVE-2020-20298

2020-12-1819:00:42

mitre

www.cve.org

9.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.1%

JSON

Eval injection vulnerability in the parserCommom method in the ParserTemplate class in zzz_template.php in zzzphp 1.7.2 allows remote attackers to execute arbitrary commands.

References

y4er.com/post/zzzphp-rce/