PT-2022-18240

Name of the Vulnerable Software and Affected Versions zbzcms version 1.0 Description The issue allows attackers to execute arbitrary code via a crafted PHP file, exploiting an arbitrary file upload vulnerability at the "/zbzedit/php/zbz.php" API endpoint, specifically the zbz.php file...

CVE-2022-27131: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability at /zbzedit/php/zbz.php in zbzcms v1.0 allows attackers to execute arbitrary code via a crafted PHP file...