Description
ZZZCMS zzzphp v1.7.2 does not properly restrict file upload in plugins/ueditor/php/controller.php?upfolder=news&action=catchimage, as demonstrated by uploading a .htaccess or .php5 file.
Unscored
CVE-2019-16720
EUVD-2019-7269GHSA-5v3q-4g69-424q
ZZZCMS zzzphp v1.7.2 does not properly restrict file upload in plugins/ueditor/php/controller.php?upfolder=news&action=catchimage, as demon…
Published Sep 23, 2019 · Updated Aug 5, 2024 · Assigned by mitre