CVE-2018-17797
An issue was discovered in zzcms 8.3. user/zssave.php allows remote attackers to delete arbitrary files via directory tr
An issue was discovered in zzcms 8.3. user/zssave.php allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg parameter in an action=modify request. This can be leveraged for database access by deleting install.lock.
MEDIUM · CVSS 6.5
EPSS 0.00258
Schedule remediation
- Public exploit or PoC is available
Sigma rules0
YARA rules0