Vulners
Lucene search
4 matches found
CVE-2019-16720
ZZZCMS zzzphp v1.7.2 does not properly restrict file upload in plugins/ueditor/php/controller.php?upfolder=news=catchimage, as demonstrated by uploading a .htaccess or .php5 file...
7.5CVSS7AI score0.01436EPSS
Exploits1References1
CVE-2019-16722
ZZZCMS zzzphp v1.7.2 has an insufficient protection mechanism against PHP Code Execution, because passthru bypasses an strireplace operation...
9.8CVSS9.7AI score0.03116EPSS
Exploits1References1
Default credentials
ZZZCMS zzzphp v1.7.2 does not properly restrict file upload in plugins/ueditor/php/controller.php?upfolder=news&action=catchimage, as demonstrated by uploading a .htaccess or .php5 file...
5CVSS7.5AI score0.01436EPSS
Exploits1References1Affected Software1
CVE-2019-16722
ZZZCMS zzzphp v1.7.2 has an insufficient protection mechanism against PHP Code Execution, because passthru bypasses an strireplace operation...
9.7AI score0.03116EPSS
Exploits1References1
20