CVE-2020-20298

Name of the Vulnerable Software and Affected Versions zzzphp version 1.7.2

Description The issue is related to an eval injection vulnerability in the parserCommom method within the ParserTemplate class in zzz template.php. This vulnerability allows remote attackers to execute arbitrary commands.

Recommendations For zzzphp version 1.7.2, consider disabling the parserCommom method in the ParserTemplate class until a patch is available. Restrict access to the zzz template.php file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.