Lucene search
HistoryJul 03, 2023 - 9:15 p.m.
CVE-2023-36162
cross site request forgery
zzcms v.2023
adminlist.php
remote attacker
privileges
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
8.8 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
50.6%
Cross Site Request Forgery vulnerability in ZZCMS v.2023 and earlier allows a remote attacker to gain privileges via the add function in adminlist.php.
Affected configurations
Node
zzcmszzcmsMatch2023
Related
cve
cve
CVE-2023-36162
2023-07-03 21:15:09
cvelist
cvelist
CVE-2023-36162
2023-07-03 00:00:00
prion
prion
Cross site request forgery (csrf)
2023-07-03 21:15:00
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
8.8 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
50.6%
Related for NVD:CVE-2023-36162