5 matches found
CVE-2022-23881
ZZZCMS zzzphp v2.1.0 was discovered to contain a remote command execution RCE vulnerability via dangerkey at zzztemplate.php...
CVE-2022-23881
ZZZCMS zzzphp v2.1.0 was discovered to contain a remote command execution RCE vulnerability via dangerkey at zzztemplate.php...
PT-2022-16309 · Unknown · Zzzcms Zzzphp
Name of the Vulnerable Software and Affected Versions: ZZZCMS zzzphp version 2.1.0 Description: A remote command execution issue was discovered in ZZZCMS zzzphp, allowing for potential exploitation via the danger key function at zzz template.php. Recommendations: For ZZZCMS zzzphp version 2.1.0,...
ZZZCMS zzzphp input validation error vulnerability (CNVD-2020-14279)
ZZZCMS zzzphp is a content management system CMS. An input validation error vulnerability exists in the 'parserIfLabel' function of the inc/zzztemplate.php file in ZZZCMS zzzphp version 1.7.3, which can be exploited by a remote attacker to bypass the 'danger key' function to execute arbitrary cod...
PT-2019-15138
Name of the Vulnerable Software and Affected Versions ZZZCMS zzzphp version 1.7.3 Description The issue allows remote attackers to execute arbitrary code. This is possible because the danger key function can be bypassed via manipulations such as strtr. Recommendations For ZZZCMS zzzphp version...