CVE-2022-23881

CRITICALNuclei

ZZZCMS zzzphp 2.1.0 - Remote Code Execution

Title source: github.com
STIX 2.1 vulnerability

Record summary

CVE-2022-23881 has a selected CVSS score of 9.8 (critical); EIP currently links 1 Nuclei template.

Description

ZZZCMS zzzphp v2.1.0 was discovered to contain a remote command execution (RCE) vulnerability via danger_key() at zzz_template.php.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

Nuclei templates

1
ProjectDiscoveryCRITICALZZZCMS zzzphp 2.1.0 - Remote Code ExecutionCVSS 9.8

ZZZCMS zzzphp v2.1.0 is susceptible to a remote command execution vulnerability via danger_key() at zzz_template.php.

Impact

Successful exploitation of this vulnerability allows an attacker to execute arbitrary code on the affected system.

Remediation

Apply the latest security patch or upgrade to a patched version of ZZZCMS zzzphp.

WeaknessesCWE-77
Authorspikpikcu
Template tagscvecve2022rcezzzphpzzzcmsvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CPE: cpe:2.3:a:zzzcms:zzzphp:2.1.0:*:*:*:*:*:*:*
https://github.com/metaStor/Vuls/blob/main/zzzcms/zzzphp%20V2.1.0%20RCE/zzzphp%20V2.1.0%20RCE.md http://www.zzzcms.com/ https://nvd.nist.gov/vuln/detail/CVE-2022-23881 https://github.com/ARPSyndicate/kenzer-templates https://github.com/ARPSyndicate/cvemon

Source: ProjectDiscovery

References

2