Описание
An issue was discovered in zzcms 8.3. It allows remote attackers to delete arbitrary files via directory traversal sequences in the flv parameter. This can be leveraged for database access by deleting install.lock.
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:zzcms:zzcms:8.3:*:*:*:*:*:*:*
EPSS
Процентиль: 75%
0.00869
Низкий
7.5 High
CVSS3
6.4 Medium
CVSS2
Дефекты
CWE-22
Связанные уязвимости
CVSS3: 7.5
github
больше 3 лет назад
An issue was discovered in zzcms 8.3. It allows remote attackers to delete arbitrary files via directory traversal sequences in the flv parameter. This can be leveraged for database access by deleting install.lock.
EPSS
Процентиль: 75%
0.00869
Низкий
7.5 High
CVSS3
6.4 Medium
CVSS2
Дефекты
CWE-22