PT-2019-11483
CVE-2019-1010152
·
تاريخ النشر
2019-07-23
·
تاريخ التحديث
2021-07-21
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
zzcms versions 8.3 and earlier
Description:
The issue affects the user/manage.php component, specifically lines 31-80, and can lead to code execution through file deletion, resulting in a potential getshell impact.
Recommendations:
For zzcms versions 8.3 and earlier, consider restricting access to the user/manage.php file until a patch is available. As a temporary workaround, avoid using the file deletion functionality in the affected component to minimize the risk of exploitation.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾