PT-2018-14200 · Zzcms · Zzcms

Publicado 2018-09-30 · Atualizado 2018-11-28 · CVE-2018-17797

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions zzcms version 8.3

Description An issue was discovered that allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg parameter in an action=modify request to the "user/zssave.php" endpoint. This can be leveraged for database access by deleting install.lock.

Recommendations For zzcms version 8.3, consider restricting access to the "user/zssave.php" endpoint or disabling the action=modify request until a patch is available. Additionally, restrict the use of the oldimg parameter to prevent directory traversal attacks.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2018-17797

Produtos afetados

Zzcms

Referências · 3

• 🔥 https://github.com/seedis/zzcms/blob/master/arbitrary_file_deletion1.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-17797 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-17797 · Aviso do Fabricante