CVE-2019-1010149

CRITICAL

zzcms < 8.3 - File Deletion to Remote Code Execution via user/licence_save.php

Title source: llm

Description

zzcms version 8.3 and earlier is affected by: File Delete to Code Execution. The impact is: zzcms File Delete to Code Execution. The component is: user/licence_save.php.

References (1)

Core 1

Core References

Exploit, Third Party Advisory x_refsource_misc

https://gist.github.com/Lz1y/e82eb9cc776e629b9d1874dc689421eb

Scores

CVSS v3 9.8

EPSS 0.0244

EPSS Percentile 82.4%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-862

Status published

Products (1)

zzcms/zzcms < 8.3

Published Jul 23, 2019

Tracked Since Feb 18, 2026