CVE-2024-44820

A sensitive information disclosure vulnerability exists in ZZCMS v.2023 and before . The flaw is located within the eginfo.php file at the path /3/E_bak5.1/upload/. When an attacker accesses this file using the query parameter phome=ShowPHPInfo, the application executes the phpinfo() function. Th...