PT-2022-18235

CVE-2022-27126

Published

2022-04-10

Updated

2022-04-15

CVSS 3.1

9.8

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions zbzcms version 1.0

Description A SQL injection issue was found in zbzcms via the art parameter at the "/include/make.php" API endpoint.

Recommendations For zbzcms version 1.0, avoid using the art parameter in the "/include/make.php" endpoint until the issue is resolved.

Exploitability

Fix

Impacts

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾