CVE-2020-19822

A remote code execution RCE vulnerability in templateuser.php of ZZCMS version 2018 allows attackers to execute arbitrary PHP code via the "ml" and "title" parameters...

CVE-2020-19822

CVE-2020-19822 affects ZZCMS 2018 with an RCE in template_user.php. The vulnerability allows arbitrary PHP code execution via the ml and title parameters. Affected component is template_user.php (ZZCMS 2018); root cause is improper handling of user-supplied ml/title inputs enabling code execution...