Lucene search
+L

4 matches found

CNNVD
CNNVD
•added 2023/10/25 12:00 a.m.•23 views

zzzCMS Code Issues Vulnerabilities

ZZZCMS is a content management system CMS. A security vulnerability exists in zzzCMS version v.2.1.9, which originates from a vulnerability that allows remote attackers to execute arbitrary code via the downurl function in the zzzz.php file...

7.8CVSS7.8AI score0.00898EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/24 12:00 a.m.•9 views

CVE-2023-45555: Unrestricted Upload of File with Dangerous Type

File Upload vulnerability in zzzCMS v.2.1.9 allows a remote attacker to execute arbitrary code via a crafted file to the downurl function in zzz.php file...

7.8CVSS7.9AI score0.00898EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2018/05/02 9:00 p.m.•38 views

CVE-2018-9919

A web-accessible backdoor, with resultant SSRF, exists in Tp-shop 2.0.5 through 2.0.8, which allows remote attackers to obtain sensitive information, attack intranet hosts, or possibly trigger remote command execution, because...

9.4AI score0.04662EPSS
SaveExploits4References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/05/02 12:00 a.m.•8 views

CVE-2018-9919: Server-Side Request Forgery (SSRF)

A web-accessible backdoor, with resultant SSRF, exists in Tp-shop 2.0.5 through 2.0.8, which allows remote attackers to obtain sensitive information, attack intranet hosts, or possibly trigger remote command execution, because...

9.8CVSS8.2AI score0.04662EPSS
SaveExploits4References2
Rows per page
Query Builder