Description
An issue was discovered in zzcms 8.2. It allows PHP code injection via the siteurl parameter to install/index.php, as demonstrated by injecting a phpinfo() call into /inc/config.php.
Unscored
CVE-2018-8966
EUVD-2018-20573GHSA-xfw8-hchc-mc9r
An issue was discovered in zzcms 8.2. It allows PHP code injection via the siteurl parameter to install/index.php, as demonstrated by injec…
Published Mar 24, 2018 · Updated Aug 5, 2024 · Assigned by mitre