CVE-2023-45555

zzzCMS 2.1.9 has a file upload vulnerability that allows remote code execution via a crafted file targeting the down_url function in zzz.php. This is documented across multiple sources (NVD, Red Hat, CNNVD, PRION, PT-2023-29572, etc.). Root cause: improper handling in down_url/zzz.php. Remediatio...

PT-2023-29572 · Zzcms · Zzcms

Name of the Vulnerable Software and Affected Versions: zzzCMS version 2.1.9 Description: The issue allows a remote attacker to execute arbitrary code via a crafted file to the down url function in the zzz.php file. This enables the attacker to potentially gain control over the system...

PT-2023-29571 · Zzcms · Zzcms

Name of the Vulnerable Software and Affected Versions: zzzCMS version 2.1.9 Description: The issue allows a remote attacker to execute arbitrary code via modification of the imageext parameter from jpg, jpeg, gif, and png to jpg, jpeg, gif, png, pphphp. This enables the attacker to potentially...

CVE-2023-45554

File Upload vulnerability in zzzCMS v.2.1.9 allows a remote attacker to execute arbitrary code via modification of the imageext parameter from jpg, jpeg,gif, and png to jpg, jpeg,gif, png, pphphp...

CVE-2023-45555

File Upload vulnerability in zzzCMS v.2.1.9 allows a remote attacker to execute arbitrary code via a crafted file to the downurl function in zzz.php file...

CVE-2023-45554

File Upload vulnerability in zzzCMS v.2.1.9 allows a remote attacker to execute arbitrary code via modification of the imageext parameter from jpg, jpeg,gif, and png to jpg, jpeg,gif, png, pphphp...

CVE-2023-45555

File Upload vulnerability in zzzCMS v.2.1.9 allows a remote attacker to execute arbitrary code via a crafted file to the downurl function in zzz.php file...

CVE-2023-45909

zzzcms v2.2.0 was discovered to contain an open redirect vulnerability...

CVE-2023-45909

zzzcms v2.2.0 was discovered to contain an open redirect vulnerability...

CVE-2023-45909

zzzcms v2.2.0 was discovered to contain an open redirect vulnerability...

Open redirect

zzzcms v2.2.0 was discovered to contain an open redirect vulnerability...

CVE-2023-45909

CVE-2023-45909 pertains to zzzcms v2.2.0, where an open redirect vulnerability has been identified. Multiple connected documents confirm the affected software and describe the vulnerability as an open redirect, stemming from zzzcms v2.2.0. There is no explicit remediation or patched version detai...

CVE-2023-45909

zzzcms v2.2.0 was discovered to contain an open redirect vulnerability...

PT-2023-29762 · Zzcms · Zzcms

Name of the Vulnerable Software and Affected Versions: zzzcms version 2.2.0 Description: The issue is related to an open redirect vulnerability. Recommendations: For zzzcms version 2.2.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability...

ZZZCMS Input Validation Error Vulnerability

ZZZCMS is a content management system CMS. A security vulnerability exists in ZZZCMS version v2.2.0, which stems from the inclusion of an open redirection vulnerability...

CVE-2023-45909

zzzcms v2.2.0 was discovered to contain an open redirect vulnerability...

CVE-2023-5582

A vulnerability, which was classified as problematic, has been found in ZZZCMS 2.2.0. This issue affects some unknown processing of the component Personal Profile Page. The manipulation leads to basic cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to th...

CVE-2023-5582

A vulnerability, which was classified as problematic, has been found in ZZZCMS 2.2.0. This issue affects some unknown processing of the component Personal Profile Page. The manipulation leads to basic cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to th...

Cross site scripting

A vulnerability, which was classified as problematic, has been found in ZZZCMS 2.2.0. This issue affects some unknown processing of the component Personal Profile Page. The manipulation leads to basic cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to th...

CVE-2023-5582 ZZZCMS Personal Profile Page cross site scripting

A vulnerability, which was classified as problematic, has been found in ZZZCMS 2.2.0. This issue affects some unknown processing of the component Personal Profile Page. The manipulation leads to basic cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to th...