Lucene search
+L

3 matches found

OSV
OSV
added 2024/01/16 10:15 p.m.6 views

CVE-2024-0603

A vulnerability classified as critical has been found in ZhiCms up to 4.0. This affects an unknown part of the file app/plug/controller/giftcontroller.php. The manipulation of the argument mylike leads to deserialization. It is possible to initiate the attack remotely. The exploit has been...

9.8CVSS5.4AI score0.00857EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/01/16 12:0 a.m.24 views

PT-2024-1613 · Zhicms · Zhicms

Name of the Vulnerable Software and Affected Versions: ZhiCms versions up to 4.0 Description: A critical vulnerability has been found in ZhiCms, affecting an unknown part of the file app/plug/controller/giftcontroller.php. The manipulation of the mylike argument leads to deserialization. It is...

10CVSS7.5AI score0.00857EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2024/01/16 12:0 a.m.7 views

ZhiCms Code Issues Vulnerabilities

ZhiCms is a professional buy-worthy system of ZhiCms community. ZhiCms 4.0 before the version of the code problem vulnerability, the vulnerability stems from app/plug/controller/giftcontroller.php in the existence of unknown parts, through the parameter mylike lead to deserialization...

9.8CVSS7AI score0.00857EPSS
SaveExploits0References4
Rows per page
Query Builder