PT-2018-18748 · Zzcms · Zzcms

Ni9Htmar3 · Published 2018-03-24 · Updated 2022-11-01 · CVE-2018-8969

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions zzcms version 8.2

Description An issue in zzcms allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg parameter in an action=modify request to the "user/licence save.php" endpoint. This can be leveraged for database access by deleting install.lock.

Recommendations For zzcms version 8.2, consider restricting access to the "user/licence save.php" endpoint or disabling the action=modify request functionality until a patch is available. Additionally, restrict the use of the oldimg parameter to prevent directory traversal attacks.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2018-8969

Affected Products

Zzcms

References · 3

• 🔥 https://github.com/Ni9htMar3/vulnerability/blob/master/zzcms_8.2/licence_save.php.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-8969 · Security Note
• https://osv.dev/vulnerability/CVE-2018-8969 · Vendor Advisory