critical9.8
CVE-2022-27129
An arbitrary file upload vulnerability at /admin/ajax.php in zbzcms v1.0 allows attackers to execute arbitrary code via a crafted PHP file.
Impact
An arbitrary file upload vulnerability at /admin/ajax.php in zbzcms v1.0 allows attackers to execute arbitrary code via a crafted PHP file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zbzcms | Zbzcms | Version 1.0 |