high8.8
CVE-2023-36162
Cross Site Request Forgery vulnerability in ZZCMS v.2023 and earlier allows a remote attacker to gain privileges via the add function in adminlist.php.
Impact
Cross Site Request Forgery vulnerability in ZZCMS v.2023 and earlier allows a remote attacker to gain privileges via the add function in adminlist.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zzcms | Zzcms | Version 2023 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.zzcms.net/about/download.html
- https://github.com/779789571/zzcms/blob/main/README.md
- https://github.com/forget-code/zzcms/issues/6
- http://www.zzcms.net/about/download.html
- https://github.com/779789571/zzcms/blob/main/README.md
- https://github.com/forget-code/zzcms/issues/6