CVE-2024-2016

A vulnerability, which was classified as critical, was found in ZhiCms 4.0. Affected is the function index of the file app/manage/controller/setcontroller.php. The manipulation of the argument sitename leads to code injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2024-2016

A vulnerability, which was classified as critical, was found in ZhiCms 4.0. Affected is the function index of the file app/manage/controller/setcontroller.php. The manipulation of the argument sitename leads to code injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2024-2016

CVE-2024-2016 affects ZhiCms 4.0; the vulnerability is in the index function of app/manage/controller/setcontroller.php where manipulating the sitename argument leads to code injection. It is exploitable remotely, and the exploit has been publicly disclosed (VDB-255270). No official patched versi...

CVE-2024-2016: Improper Control of Generation of Code

A vulnerability, which was classified as critical, was found in ZhiCms 4.0. Affected is the function index of the file app/manage/controller/setcontroller.php. The manipulation of the argument sitename leads to code injection. It is possible to launch the attack remotely. The exploit has been...