CVE-2019-1010152

Name of the Vulnerable Software and Affected Versions: zzcms versions 8.3 and earlier

Description: The issue affects the user/manage.php component, specifically lines 31-80, and can lead to code execution through file deletion, resulting in a potential getshell impact.

Recommendations: For zzcms versions 8.3 and earlier, consider restricting access to the user/manage.php file until a patch is available. As a temporary workaround, avoid using the file deletion functionality in the affected component to minimize the risk of exploitation.