Code injection

2019-02-2607:29:00

PRIOn knowledge base

www.prio-n.com

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.0%

JSON

There is a CSRF in ZZZCMS zzzphp V1.6.1 via a /admin015/save.php?act=editfile request. It allows PHP code injection by providing a filename in the file parameter, and providing file content in the filetext parameter.

CPENameOperatorVersion
zzzphpeq1.6.1

CPE	Name	Operator	Version
	zzzphp	eq	1.6.1

References

www.iwantacve.cn/index.php/archives/119/