Lucene search
K

7 matches found

NVD
NVD
added 2022/03/23 9:15 p.m.10 views

CVE-2022-23881

ZZZCMS zzzphp v2.1.0 was discovered to contain a remote command execution RCE vulnerability via dangerkey at zzztemplate.php...

9.8CVSS0.86657EPSS
Exploits1References1
OSV
OSV
added 2022/03/23 9:15 p.m.1 views

CVE-2022-23881

ZZZCMS zzzphp v2.1.0 was discovered to contain a remote command execution RCE vulnerability via dangerkey at zzztemplate.php...

9.8CVSS5.9AI score
Exploits0References1
CVE
CVE
added 2022/03/23 8:9 p.m.118 views

CVE-2022-23881

ZZZCMS zzzphp 2.1.0 is affected by a remote code execution (RCE) vulnerability via danger_key() in zzz_template.php. Root cause: improper handling in danger_key() allows arbitrary code execution. Impact: attacker can execute code on affected systems (high/critical impact per sources). Exploitatio...

9.8CVSS9.7AI score0.86657EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2022/03/23 12:0 a.m.2 views

ZZZCMS zzzphp 安全漏洞

ZZZCMS zzzphp is a content management system CMS. A security vulnerability exists in ZZZCMS zzzphp version v2.1.0, which stems from incomplete filtering of user-entered parameters by the dangerkey function in zzztemplate.php...

9.8CVSS8.3AI score0.86657EPSS
Exploits1References2
OSV
OSV
added 2019/10/14 12:15 p.m.2 views

CVE-2019-17408

parserIfLabel in inc/zzztemplate.php in ZZZCMS zzzphp 1.7.3 allows remote attackers to execute arbitrary code because the dangerkey function can be bypassed via manipulations such as strtr...

9.8CVSS7.6AI score0.01969EPSS
Exploits1References1
Prion
Prion
added 2019/10/14 12:15 p.m.9 views

Code injection

parserIfLabel in inc/zzztemplate.php in ZZZCMS zzzphp 1.7.3 allows remote attackers to execute arbitrary code because the dangerkey function can be bypassed via manipulations such as strtr...

7.5CVSS9.7AI score0.01969EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2019/10/14 11:43 a.m.12 views

CVE-2019-17408

parserIfLabel in inc/zzztemplate.php in ZZZCMS zzzphp 1.7.3 allows remote attackers to execute arbitrary code because the dangerkey function can be bypassed via manipulations such as strtr...

9.8AI score0.01969EPSS
Exploits1References1
Rows per page
Query Builder