ZZCMS SQL注入漏洞

ZZCMS is a content management system CMS by the ZZCMS team in China. A SQL injection vulnerability exists in ZZCMS version 2023, which originates from the lack of validation of the parameter phome in file 3/Ebak5.1/upload/phome.php for external SQL statements, which can be exploited by an attacke...

ZZCMS 安全漏洞

ZZCMS is a content management system CMS by the ZZCMS team in China. A security vulnerability exists in ZZCMS version 2023, which originates from the parameter phome in file 3/Ebak5.1/upload/eginfo.php that can lead to information leakage...

PT-2024-38691 · Zzcms · Zzcms

Name of the Vulnerable Software and Affected Versions: ZZCMS version 2023 Description: A problem affects an unknown processing of the file 3/E bak5.1/upload/eginfo.php. The manipulation of the phome argument with the input ShowPHPInfo leads to information disclosure. The attack may be initiated...