PT-2022-12319
CVE-2021-45286
·
تاريخ النشر
2022-02-09
·
تاريخ التحديث
2022-02-15
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
ZZCMS version 2021
Description
A Directory Traversal issue exists via the
skin parameter in several PHP files, including "index.php", "bottom.php", and "top index.php". This allows for potential unauthorized access to sensitive files.Recommendations
For ZZCMS version 2021, consider restricting access to the
skin parameter in the affected PHP files until a patch is available. As a temporary workaround, restrict access to the vulnerable PHP files "index.php", "bottom.php", and "top index.php" to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾