high7.2Public exploit code
CVE-2019-9041
An issue was discovered in ZZZCMS zzzphp V1.6.1.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- zzzphp CMS 1.6.1 - Remote Code Execution2019-02-25 · webapps · php
Impact
An issue was discovered in ZZZCMS zzzphp V1.6.1. In the inc/zzz_template.php file, the parserIfLabel() function's filtering is not strict, resulting in PHP code execution, as demonstrated by the if:assert substring.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zzzcms | Zzzphp | Version 1.6.1 |