Design/Logic Flaw

2019-09-2314:15:00

PRIOn knowledge base

www.prio-n.com

9.5 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

79.2%

ZZZCMS zzzphp v1.7.2 has an insufficient protection mechanism against PHP Code Execution, because passthru bypasses an str_ireplace operation.

CPENameOperatorVersion
zzzphpeq1.7.2

CPE	Name	Operator	Version
	zzzphp	eq	1.7.2

References

www.iwantacve.cn/index.php/archives/348/