Lucene search
+L

9 matches found

OSV
OSV
•added 2022/03/23 9:15 p.m.•16 views

CVE-2022-23881

ZZZCMS zzzphp v2.1.0 was discovered to contain a remote command execution RCE vulnerability via dangerkey at zzztemplate.php...

9.8CVSS5.9AI score0.56509EPSS
SaveExploits1References1
NVD
NVD
•added 2022/03/23 9:15 p.m.•35 views

CVE-2022-23881

ZZZCMS zzzphp v2.1.0 was discovered to contain a remote command execution RCE vulnerability via dangerkey at zzztemplate.php...

9.8CVSS0.56509EPSS
SaveExploits1References1
CVE
CVE
•added 2022/03/23 8:09 p.m.•146 views

CVE-2022-23881

ZZZCMS zzzphp 2.1.0 is affected by a remote code execution (RCE) vulnerability via danger_key() in zzz_template.php. Root cause: improper handling in danger_key() allows arbitrary code execution. Impact: attacker can execute code on affected systems (high/critical impact per sources). Exploitatio...

9.8CVSS9.7AI score0.56509EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2022/03/23 12:00 a.m.•15 views

ZZZCMS zzzphp 安全漏洞

ZZZCMS zzzphp is a content management system CMS. A security vulnerability exists in ZZZCMS zzzphp version v2.1.0, which stems from incomplete filtering of user-entered parameters by the dangerkey function in zzztemplate.php...

9.8CVSS8.3AI score0.56509EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/23 12:00 a.m.•2 views

CVE-2022-23881: Undefined Security Weakness

ZZZCMS zzzphp v2.1.0 was discovered to contain a remote command execution RCE vulnerability via dangerkey at zzztemplate.php...

9.8CVSS8.4AI score0.56509EPSS
SaveExploits1References1
OSV
OSV
•added 2019/10/14 12:15 p.m.•15 views

CVE-2019-17408

parserIfLabel in inc/zzztemplate.php in ZZZCMS zzzphp 1.7.3 allows remote attackers to execute arbitrary code because the dangerkey function can be bypassed via manipulations such as strtr...

9.8CVSS7.6AI score0.03691EPSS
SaveExploits1References1
Prion
Prion
•added 2019/10/14 12:15 p.m.•24 views

Code injection

parserIfLabel in inc/zzztemplate.php in ZZZCMS zzzphp 1.7.3 allows remote attackers to execute arbitrary code because the dangerkey function can be bypassed via manipulations such as strtr...

7.5CVSS9.7AI score0.03691EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2019/10/14 11:43 a.m.•42 views

CVE-2019-17408

parserIfLabel in inc/zzztemplate.php in ZZZCMS zzzphp 1.7.3 allows remote attackers to execute arbitrary code because the dangerkey function can be bypassed via manipulations such as strtr...

9.8AI score0.03691EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/10/14 12:00 a.m.•2 views

CVE-2019-17408: Improper Control of Generation of Code

parserIfLabel in inc/zzztemplate.php in ZZZCMS zzzphp 1.7.3 allows remote attackers to execute arbitrary code because the dangerkey function can be bypassed via manipulations such as strtr...

9.8CVSS8.7AI score0.03691EPSS
SaveExploits1References2
Rows per page
Query Builder