Zzzphp vulnerabilities

1 known vulnerability in Zzzphp from Zzzcms. 1 is rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  ThinkPHP Remote Code Execution Exploited

  CVE-2019-9082Feb 24, 2019ThinkphpEPSS 97.4%

  ThinkPHP before 3.2.4, as used in Open Source BMS v1.1.1 and other products, allows Remote Command Execution via public//?s=index/\think\app/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]= followed by the command.