Description
zzzcms zzzphp before 2.0.4 allows remote attackers to execute arbitrary OS commands by placing them in the keys parameter of a ?location=search URI, as demonstrated by an OS command within an "if" "end if" block.
Unscored
CVE-2021-32605
EUVD-2021-19445GHSA-w2v7-6jjj-cwx5
zzzcms zzzphp before 2.0.4 allows remote attackers to execute arbitrary OS commands by placing them in the keys parameter of a ?location=se…
Published May 11, 2021 · Updated Aug 3, 2024 · Assigned by mitre