Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-253p-9p9w-rg6r

Опубликовано: 26 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

ZenTaoPMS v18.11 through v21.6.beta is vulnerable to Directory Traversal in /module/ai/control.php. This allows attackers to execute arbitrary code via a crafted file upload

ZenTaoPMS v18.11 through v21.6.beta is vulnerable to Directory Traversal in /module/ai/control.php. This allows attackers to execute arbitrary code via a crafted file upload

EPSS

Процентиль: 73%
0.0076
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 9.8
nvd
около 1 месяца назад

ZenTaoPMS v18.11 through v21.6.beta is vulnerable to Directory Traversal in /module/ai/control.php. This allows attackers to execute arbitrary code via a crafted file upload

EPSS

Процентиль: 73%
0.0076
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-22