Lucene search
+L

10 matches found

NVD
NVD
added 2025/11/05 4:15 p.m.10 views

CVE-2025-57130

An Incorrect Access Control vulnerability in the user management component of ZwiiCMS up to v13.6.07 allows a remote, authenticated attacker to escalate their privileges. By sending a specially crafted HTTP request, a low-privilege user can access and modify the profile data of any other user,...

8.8CVSS0.00359EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2025/11/05 12:0 a.m.5 views

CVE-2025-57130

An Incorrect Access Control vulnerability in the user management component of ZwiiCMS up to v13.6.07 allows a remote, authenticated attacker to escalate their privileges. By sending a specially crafted HTTP request, a low-privilege user can access and modify the profile data of any other user,...

8.8CVSS5.9AI score0.00359EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2011-0525

Malware in sbrugna...

5.1CVSS6.4AI score0.02447EPSS
SaveExploits2References7
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.12 views

Zwii 2.1.1 - Remote File Inclusion Vulnerbility

No description provided by source...

7.1AI score
SaveExploits0
NVD
NVD
added 2011/01/20 7:0 p.m.22 views

CVE-2011-0505

Directory traversal vulnerability in system/system.php in Zwii 2.1.1, when magicquotesgpc is disabled and registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the settemplatevalue parameter...

5.1CVSS7.2AI score0.02447EPSS
SaveExploits2References6
CVE
CVE
added 2011/01/20 6:0 p.m.38 views

CVE-2011-0505

CVE-2011-0505 affects Zwii 2.1.1, specifically the directory traversal flaw in system/system.php. The root cause is that when magic_quotes_gpc is disabled and register_globals is enabled, an attacker can manipulate the set[template][value] parameter to include and execute arbitrary local files. T...

5.1CVSS7.4AI score0.02447EPSS
SaveExploits2References6Affected Software1
Cvelist
Cvelist
added 2011/01/20 6:0 p.m.21 views

CVE-2011-0505

Directory traversal vulnerability in system/system.php in Zwii 2.1.1, when magicquotesgpc is disabled and registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the settemplatevalue parameter...

7.2AI score0.02447EPSS
SaveExploits2References6
zdt
zdt
added 2011/01/09 12:0 a.m.17 views

Zwii v 2.1.1 Remote File Inclusion Vulnerbility

Exploit for php platform in category web applications Exploit Title: Zwii v 2.1.1 Remote file include vulnerbility Google Dork: Propulsé par Zwii 2.1.1 Date: 08/01/2011 Author: Abdi Mohamed Software Link: http://scripts.toocharger.com/fiches/scripts/zwii/5147.htm Version: v 2.1.1 Tested on: ubun...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2011/01/08 12:0 a.m.19 views

Zwii 2.1.1 - Remote File Inclusion

Zwii 2.1.1 - Remote File Inclusion Exploit Title: Zwii v 2.1.1 Remote file include vulnerbility Google Dork: Propulsé par Zwii 2.1.1 Date: 08/01/2011 Author: Abdi Mohamed Software Link: http://scripts.toocharger.com/fiches/scripts/zwii/5147.htm Version: v 2.1.1 Tested on: ubuntu + centos Email :...

7.5AI score
SaveExploits0
Exploit DB
Exploit DB
added 2011/01/08 12:0 a.m.35 views

Zwii 2.1.1 - Remote File Inclusion

Exploit Title: Zwii v 2.1.1 Remote file include vulnerbility Google Dork: Propulsé par Zwii 2.1.1 Date: 08/01/2011 Author: Abdi Mohamed Software Link: http://scripts.toocharger.com/fiches/scripts/zwii/5147.htm Version: v 2.1.1 Tested on: ubuntu + centos Email : [email protected] -...

5.1CVSS5.2AI score0.02447EPSS
SaveExploits2
Rows per page
Query Builder