ZZCMS Path Traversal Vulnerability

ZZCMS is a content management system CMS by the ZZCMS team in China. A path traversal vulnerability exists in ZZCMS version 2023, which stems from the parameter skin in the file /admin/aboutedit.php?action=modify that causes path traversal. No details of the vulnerability are provided at this tim...

CVE-2024-7926: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability classified as critical has been found in ZZCMS 2023. Affected is an unknown function of the file /admin/aboutedit.php?action=modify. The manipulation of the argument skin leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the...