CVE-2019-9182 There is a CSRF in ZZZCMS zzzphp V1.6.1 via a /admin015/save.php?act=editfile request. It allows PHP code injection by providing a filename in the file parameter, and providing file content in the fil...
HighCVSS 8.8
EPSS 0.79%
- Published
- Updated
- Exploit status
- No public exploit known
Description
There is a CSRF in ZZZCMS zzzphp V1.6.1 via a /admin015/save.php?act=editfile request. It allows PHP code injection by providing a filename in the file parameter, and providing file content in the filetext parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zzzcms zzzphp | = 1.6.1 | No fix listed |
References
- www.iwantacve.cn exploit third-party-advisory
- packetstorm.news
- www.exploit-db.com