| Package | Affected versions | Patched versions |
|---|---|---|
| zzcms | ≤ 2023 |
A sensitive information disclosure vulnerability exists in ZZCMS v.2023 and before within the eginfo.php file located at /3/E_bak5.1/upload/. When accessed with the query parameter phome=ShowPHPInfo, the application executes the phpinfo() function, which exposes detailed information about the PHP environment, including server configuration, loaded modules, and environment variables.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free