Zzzcms vulnerabilities
We track 4 vulnerabilities in Zzzcms products across 2 products. 4 are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on October 25, 2023.
Latest Zzzcms vulnerabilities
- 7.8 High severity
Zzzcms: Unrestricted Upload of File with Dangerous Type
File Upload vulnerability in zzzCMS v.2.1.9 allows a remote attacker to execute arbitrary code via a crafted file to the down_url function in zzz.php file.
- 9.8 Critical severity
Zzzcms: Unrestricted Upload of File with Dangerous Type
File Upload vulnerability in zzzCMS v.2.1.9 allows a remote attacker to execute arbitrary code via modification of the imageext parameter from jpg, jpeg,gif, and png to jpg, jpeg,gif, png, pphphp.
- 8.8 High severity
A vulnerability was found in ZZZCMS 2.1.7 and classified as critical.
A vulnerability was found in ZZZCMS 2.1.7 and classified as critical. Affected by this issue is the function restore of the file /admin/save.php of the component Database Backup File Handler. The manipulation leads to permission issues. The attack may be launc
- 8.8 High severity
ThinkPHP Remote Code Execution Exploited
ThinkPHP before 3.2.4, as used in Open Source BMS v1.1.1 and other products, allows Remote Command Execution via public//?s=index/\think\app/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]= followed by the command.