PT-2019-14792 · Zzcms · Zzcms

Publicado 2019-09-23 · Atualizado 2019-09-23 · CVE-2019-16720

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions ZZZCMS zzzphp version 1.7.2

Description The issue concerns a lack of proper restriction on file uploads in the plugins/ueditor/php/controller.php endpoint, specifically when the "upfolder" parameter is set to "news" and the "action" parameter is set to "catchimage". This allows for the upload of malicious files, such as .htaccess or .php5 files.

Recommendations For ZZZCMS zzzphp version 1.7.2, consider restricting access to the "upfolder=news&action=catchimage" endpoint in the plugins/ueditor/php/controller.php file to prevent malicious file uploads. As a temporary workaround, consider disabling the file upload functionality in this endpoint until a proper fix is available.

Exploit

Correção

Unrestricted File Upload

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

CVE-2019-16720

Produtos afetados

Zzcms

Referências · 3

• 🔥 http://iwantacve.cn/index.php/archives/333 · Exploit
• https://osv.dev/vulnerability/CVE-2019-16720 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-16720 · Nota de Segurança