CVE-2022-27126

Description

References

• wu610777031/My_CMSHunter · Broken Link

Altre vulnerabilità di zbzcms

• CVE-2022-27133CRITICO 9.1zbzcms v1.0 was discovered to contain an arbitrary file deletion vulnerability via /include/up.php.
• CVE-2022-27131CRITICO 9.8An arbitrary file upload vulnerability at /zbzedit/php/zbz.php in zbzcms v1.0 allows attackers to execute arbitrary code via a crafted PHP f…
• CVE-2022-27129CRITICO 9.8An arbitrary file upload vulnerability at /admin/ajax.php in zbzcms v1.0 allows attackers to execute arbitrary code via a crafted PHP file.
• CVE-2022-27128CRITICO 9.8An incorrect access control issue at /admin/run_ajax.php in zbzcms v1.0 allows attackers to arbitrarily add administrator accounts.
• CVE-2022-27127MEDIO 6.5zbzcms v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php/ajax.php.