CVE-2024-7927 ZZCMS class.php path traversal

A vulnerability classified as critical was found in ZZCMS 2023. Affected by this vulnerability is an unknown functionality of the file /admin/class.php?dowhat=modifyclass. The manipulation of the argument skin leads to path traversal. The attack can be launched remotely. The exploit has been...

CVE-2024-7926 ZZCMS about_edit.php path traversal

A vulnerability classified as critical has been found in ZZCMS 2023. Affected is an unknown function of the file /admin/aboutedit.php?action=modify. The manipulation of the argument skin leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the...

CVE-2024-7926 ZZCMS about_edit.php path traversal

A vulnerability classified as critical has been found in ZZCMS 2023. Affected is an unknown function of the file /admin/aboutedit.php?action=modify. The manipulation of the argument skin leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the...

CVE-2024-7926

CVE-2024-7926 is a known path traversal vulnerability affecting ZZCMS 2023. The flaw is in the unknown function of the file /admin/about_edit.php?action=modify, triggered by manipulating the skin parameter, enabling remote exploitation. Public exploit code/details exist, indicating active risk. S...

CVE-2024-7924

A vulnerability was found in ZZCMS 2023. It has been declared as critical. This vulnerability affects unknown code of the file /I/list.php. The manipulation of the argument skin leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be...

CVE-2024-7925

A vulnerability was found in ZZCMS 2023. It has been rated as problematic. This issue affects some unknown processing of the file 3/Ebak5.1/upload/eginfo.php. The manipulation of the argument phome with the input ShowPHPInfo leads to information disclosure. The attack may be initiated remotely. T...

CVE-2024-7924

A vulnerability was found in ZZCMS 2023. It has been declared as critical. This vulnerability affects unknown code of the file /I/list.php. The manipulation of the argument skin leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be...

CVE-2024-7925 ZZCMS eginfo.php information disclosure

A vulnerability was found in ZZCMS 2023. It has been rated as problematic. This issue affects some unknown processing of the file 3/Ebak5.1/upload/eginfo.php. The manipulation of the argument phome with the input ShowPHPInfo leads to information disclosure. The attack may be initiated remotely. T...

CVE-2024-7925

CVE-2024-7925 (ZZCMS 2023) affects the component handling file 3/E_bak5.1/upload/eginfo.php. The issue arises from manipulating the phome argument with the input ShowPHPInfo, which leads to information disclosure. The vulnerability supports remote exploitation (attack vector: network). The availa...

CVE-2024-7925 ZZCMS eginfo.php information disclosure

A vulnerability was found in ZZCMS 2023. It has been rated as problematic. This issue affects some unknown processing of the file 3/Ebak5.1/upload/eginfo.php. The manipulation of the argument phome with the input ShowPHPInfo leads to information disclosure. The attack may be initiated remotely. T...

CVE-2024-7924 ZZCMS list.php path traversal

A vulnerability was found in ZZCMS 2023. It has been declared as critical. This vulnerability affects unknown code of the file /I/list.php. The manipulation of the argument skin leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be...

CVE-2024-7924

CVE-2024-7924 affects ZZCMS 2023. The vulnerability is in the file /I/list.php, where manipulating the skin parameter enables path traversal. The issue can be exploited remotely and, per multiple sources, the exploit has been disclosed publicly. Some sources describe it as critical; CVSS vectors ...

CVE-2024-7924 ZZCMS list.php path traversal

A vulnerability was found in ZZCMS 2023. It has been declared as critical. This vulnerability affects unknown code of the file /I/list.php. The manipulation of the argument skin leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be...

PT-2024-38693 · Zzcms · Zzcms

Name of the Vulnerable Software and Affected Versions: ZZCMS version 2023 Description: A critical vulnerability was found in ZZCMS, affecting an unknown functionality of the file "/admin/class.php?dowhat=modifyclass". The manipulation of the argument skin leads to path traversal. The attack can b...

PT-2024-38692 · Zzcms · Zzcms

Name of the Vulnerable Software and Affected Versions: ZZCMS version 2023 Description: A critical vulnerability has been found in ZZCMS. The issue affects an unknown function of the file /admin/about edit.php?action=modify. The manipulation of the skin argument leads to path traversal. It is...

PT-2024-38691 · Zzcms · Zzcms

Name of the Vulnerable Software and Affected Versions: ZZCMS version 2023 Description: A problem affects an unknown processing of the file 3/E bak5.1/upload/eginfo.php. The manipulation of the phome argument with the input ShowPHPInfo leads to information disclosure. The attack may be initiated...

ZZCMS 安全漏洞

ZZCMS is a content management system CMS by the ZZCMS team in China. A security vulnerability exists in ZZCMS version 2023, which originates from the parameter phome in file 3/Ebak5.1/upload/eginfo.php that can lead to information leakage...

PT-2024-38690 · Zzcms · Zzcms

Name of the Vulnerable Software and Affected Versions: ZZCMS version 2023 Description: A critical vulnerability was found in ZZCMS 2023, affecting unknown code in the file /I/list.php. The manipulation of the skin argument leads to path traversal. This issue can be exploited remotely. The exploit...

ZZCMS 路径遍历漏洞

ZZCMS is a content management system CMS by the ZZCMS team in China. ZZCMS suffers from an arbitrary file read vulnerability, which is due to a lack of effective validation of file paths and can be exploited by an attacker to perform directory traversal...

CVE-2024-7925: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability was found in ZZCMS 2023. It has been rated as problematic. This issue affects some unknown processing of the file 3/Ebak5.1/upload/eginfo.php. The manipulation of the argument phome with the input ShowPHPInfo leads to information disclosure. The attack may be initiated remotely. T...