PT-2022-16309 · Unknown · Zzzcms Zzzphp

Published 2022-03-23 · Updated 2023-08-08 · CVE-2022-23881

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ZZZCMS zzzphp version 2.1.0

Description A remote command execution issue was discovered in ZZZCMS zzzphp, allowing for potential exploitation via the danger key() function at zzz template.php.

Recommendations For ZZZCMS zzzphp version 2.1.0, consider disabling the danger key() function at zzz template.php as a temporary workaround until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2022-23881

Affected Products

Zzzcms Zzzphp

References · 4

• 🔥 https://github.com/metaStor/Vuls/blob/main/zzzcms/zzzphp%20V2.1.0%20RCE/zzzphp%20V2.1.0%20RCE.md · Exploit
• https://osv.dev/vulnerability/CVE-2022-23881 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-23881 · Security Note
• https://t.me/cibsecurity/39438 · Telegram Post