CVE-2019-9041
PoC —CVSS 3.0
7.2 high
EPSS
31%p98
Published
()
Modified
Description
An issue was discovered in ZZZCMS zzzphp V1.6.1. In the inc/zzz_template.php file, the parserIfLabel() function's filtering is not strict, resulting in PHP code execution, as demonstrated by the if:assert substring.
- Vendors
- zzzcms
- Products
- zzzphp
- Weakness
- CWE-917
- Vector
- CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
In the news0 stories
No ingested article mentions this CVE yet.