Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown
CVE-2020-20298
Disclosure Date: December 18, 2020 (last updated February 22, 2025)
Eval injection vulnerability in the parserCommom method in the ParserTemplate class in zzz_template.php in zzzphp 1.7.2 allows remote attackers to execute arbitrary commands.
0
Attacker Value
Unknown
CVE-2019-16722
Disclosure Date: September 23, 2019 (last updated November 27, 2024)
ZZZCMS zzzphp v1.7.2 has an insufficient protection mechanism against PHP Code Execution, because passthru bypasses an str_ireplace operation.
0
Attacker Value
Unknown
CVE-2019-16720
Disclosure Date: September 23, 2019 (last updated November 27, 2024)
ZZZCMS zzzphp v1.7.2 does not properly restrict file upload in plugins/ueditor/php/controller.php?upfolder=news&action=catchimage, as demonstrated by uploading a .htaccess or .php5 file.
0
