PT-2018-9506
CVE-2018-1000653
·
Publicado
2018-08-20
·
Atualizado
2018-10-12
Descrição por
CVSS 3.1
9.8
CríticaMétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
zzcms versions 8.3 and earlier
Description
The issue is related to a SQL Injection vulnerability in the zt/top.php file at line 5. This vulnerability can be exploited when running zzcms in nginx, potentially allowing an attack via SQL injection.
Recommendations
For zzcms versions 8.3 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Explorabilidade
Exploit
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾