CVE-2025-57130

An Incorrect Access Control vulnerability in the user management component of ZwiiCMS up to v13.6.07 allows a remote, authenticated attacker to escalate their privileges. By sending a specially crafted HTTP request, a low-privilege user can access and modify the profile data of any other user,...

CVE-2025-57130

An Incorrect Access Control vulnerability in the user management component of ZwiiCMS up to v13.6.07 allows a remote, authenticated attacker to escalate their privileges. By sending a specially crafted HTTP request, a low-privilege user can access and modify the profile data of any other user,...

EUVD-2011-0525

Malware in sbrugna...

Zwii 2.1.1 - Remote File Inclusion Vulnerbility

No description provided by source...

CVE-2011-0505

Directory traversal vulnerability in system/system.php in Zwii 2.1.1, when magicquotesgpc is disabled and registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the settemplatevalue parameter...

CVE-2011-0505

Directory traversal vulnerability in system/system.php in Zwii 2.1.1, when magicquotesgpc is disabled and registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the settemplatevalue parameter...

CVE-2011-0505

CVE-2011-0505 affects Zwii 2.1.1, specifically the directory traversal flaw in system/system.php. The root cause is that when magic_quotes_gpc is disabled and register_globals is enabled, an attacker can manipulate the set[template][value] parameter to include and execute arbitrary local files. T...

PT-2011-2404

Name of the Vulnerable Software and Affected Versions Zwii version 2.1.1 Description A directory traversal issue exists when magic quotes gpc is disabled and register globals is enabled, allowing remote attackers to include and execute arbitrary local files via directory traversal sequences in th...

CVE-2011-0505: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in system/system.php in Zwii 2.1.1, when magicquotesgpc is disabled and registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the settemplatevalue parameter...

Zwii v 2.1.1 Remote File Inclusion Vulnerbility

Exploit for php platform in category web applications Exploit Title: Zwii v 2.1.1 Remote file include vulnerbility Google Dork: Propulsé par Zwii 2.1.1 Date: 08/01/2011 Author: Abdi Mohamed Software Link: http://scripts.toocharger.com/fiches/scripts/zwii/5147.htm Version: v 2.1.1 Tested on: ubun...

Zwii 2.1.1 - Remote File Inclusion

Exploit Title: Zwii v 2.1.1 Remote file include vulnerbility Google Dork: Propulsé par Zwii 2.1.1 Date: 08/01/2011 Author: Abdi Mohamed Software Link: http://scripts.toocharger.com/fiches/scripts/zwii/5147.htm Version: v 2.1.1 Tested on: ubuntu + centos Email : [email protected] -...

Zwii 2.1.1 - Remote File Inclusion

Zwii 2.1.1 - Remote File Inclusion Exploit Title: Zwii v 2.1.1 Remote file include vulnerbility Google Dork: Propulsé par Zwii 2.1.1 Date: 08/01/2011 Author: Abdi Mohamed Software Link: http://scripts.toocharger.com/fiches/scripts/zwii/5147.htm Version: v 2.1.1 Tested on: ubuntu + centos Email :...