Show filters
2 Total Results
Displaying 1-2 of 2
Sort by:
Attacker Value
Unknown
CVE-2020-19822
Disclosure Date: August 26, 2021 (last updated February 23, 2025)
A remote code execution (RCE) vulnerability in template_user.php of ZZCMS version 2018 allows attackers to execute arbitrary PHP code via the "ml" and "title" parameters.
0
Attacker Value
Unknown
CVE-2019-8411
Disclosure Date: February 17, 2019 (last updated November 27, 2024)
admin/dl_data.php in zzcms 2018 (2018-10-19) allows remote attackers to delete arbitrary files via action=del&filename=../ directory traversal.
0
