Description
A vulnerability was found in ZZCMS 2023. It has been declared as critical. This vulnerability affects unknown code of the file /I/list.php. The manipulation of the argument skin leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | ZZCMS | 2023 | — |
References
- VDB-275110 | ZZCMS list.php path traversal vdb-entry technical-description
- VDB-275110 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #391876 | ZZCMS China Merchants Network Content Management System zzcms 2023 Unauthenticated Arbitrary File Read third-party-advisory
- https://gitee.com/A0kooo/cve_article/blob/master/zzcms/zzcms%20list.php%20Directory%20traversal.md exploit