Vendors / Zzzcms Records 20 All Threatist records
Exploited (KEV) 1
CVSS critical 9
CVSS high 8
Exploited now Zzzcms records in CISA KEV
Components Products in the NVD configurations · select one to filter the records Priority HIGH 82
File Upload vulnerability in zzzCMS v.2.1.9 allows a remote attacker to execute arbitrary code via modification of the imageext parameter from jpg, jpeg,gif, and png to jpg, jpeg,gif, png, pphphp.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01982 · Published 2023-10-24 · No fix listed CWE-434
Priority HIGH 71
A vulnerability was found in ZZZCMS 2.1.7 and classified as critical.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00744 · Published 2023-09-29 · No fix listed CWE-275
Priority MEDIUM 44
File Upload vulnerability in zzzCMS v.2.1.9 allows a remote attacker to execute arbitrary code via a crafted file to the down_url function in zzz.php file.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.01057 · Published 2023-10-24 · No fix listed CWE-434
Priority LOW 39
A Cross Site Request Forgery (CSRF) vulnerability exits in ZZZCMS V1.7.1 via the save_user funciton in save.php.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00543 · Published 2021-12-09 · No fix listed CWE-352
Priority LOW 25
A vulnerability, which was classified as problematic, has been found in ZZZCMS 2.2.0.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00564 · Published 2023-10-14 · No fix listed CWE-80
Priority LOW 25
A Cross Site Scripting (XSS) exists in ZZZCMS V1.7.1 via an editfile action in save.php.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00581 · Published 2021-12-09 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
9 8 3 0 0
THREATIST.IORead the docs