CVE-2019-1010150

zzcms 8.3 and earlier is affected by: File Delete to Code Execution. The impact is: getshell. The component is: /user/zssave.php...

CVE-2019-1010150

zzcms 8.3 and earlier is affected by: File Delete to Code Execution. The impact is: getshell. The component is: /user/zssave.php...

PT-2019-11481

Name of the Vulnerable Software and Affected Versions: zzcms versions 8.3 and earlier Description: The issue affects the /user/zssave.php component, allowing for file deletion to code execution, which can lead to getshell impact. Recommendations: For zzcms versions 8.3 and earlier, at the moment,...

CVE-2019-1010150: Missing Authorization

zzcms 8.3 and earlier is affected by: File Delete to Code Execution. The impact is: getshell. The component is: /user/zssave.php...

PT-2018-14200

Name of the Vulnerable Software and Affected Versions zzcms version 8.3 Description An issue was discovered that allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg parameter in an action=modify request to the "user/zssave.php" endpoint. This can be...

CVE-2018-17797: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in zzcms 8.3. user/zssave.php allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg parameter in an action=modify request. This can be leveraged for database access by deleting install.lock...