critical9.8
CVE-2022-27128
An incorrect access control issue at /admin/run_ajax.php in zbzcms v1.0 allows attackers to arbitrarily add administrator accounts.
Impact
An incorrect access control issue at /admin/run_ajax.php in zbzcms v1.0 allows attackers to arbitrarily add administrator accounts.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zbzcms | Zbzcms | Version 1.0 |