CVE-2019-9041: Improper Neutralization of Special Elements used in an Expression Language Statement

An issue was discovered in ZZZCMS zzzphp V1.6.1. In the inc/zzztemplate.php file, the parserIfLabel function's filtering is not strict, resulting in PHP code execution, as demonstrated by the if:assert substring...

PT-2019-19330

Name of the Vulnerable Software and Affected Versions ZZZCMS zzzphp version 1.6.1 Description An issue in the inc/zzz template.php file allows for PHP code execution due to insufficient filtering in the parserIfLabel function. This can be exploited using specific substrings, such as if:assert...