| Package | Affected versions | Patched versions |
|---|---|---|
| zzzphp | < 2.0.4 | 2.0.4 |
zzzcms zzzphp before 2.0.4 allows remote attackers to execute arbitrary OS commands by placing them in the keys parameter of a ?location=search URI, as demonstrated by an OS command within an "if" "end if" block.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free