| Package | Affected versions | Patched versions |
|---|---|---|
| zzzphp | = 1.6.1 |
There is a CSRF in ZZZCMS zzzphp V1.6.1 via a /admin015/save.php?act=editfile request. It allows PHP code injection by providing a filename in the file parameter, and providing file content in the filetext parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free