2 matches found
PT-2021-10224
Name of the Vulnerable Software and Affected Versions: ZZZCMS zzzphp version 1.7.1 Description: The issue allows remote attackers to execute arbitrary code due to a lack of parameter filtering in inc/zzz template.php. This enables attackers to inject SQL code, potentially leading to unauthorized...
9.8CVSS6.5AI score0.03589EPSS
SaveExploits1References5
PT-2019-19330
Name of the Vulnerable Software and Affected Versions ZZZCMS zzzphp version 1.6.1 Description An issue in the inc/zzz template.php file allows for PHP code execution due to insufficient filtering in the parserIfLabel function. This can be exploited using specific substrings, such as if:assert...
7.2CVSS0.31421EPSS
SaveExploits8References5
20