PT-2019-11962

Name of the Vulnerable Software and Affected Versions ZZZCMS zzzphp version 1.6.3 Description The issue allows remote attackers to execute arbitrary PHP code via a .php URL in the "plugins/ueditor/php/controller.php?action=catchimage" API endpoint, specifically through the source parameter, due t...