VYPR
High severity7.3NVD Advisory· Published Aug 19, 2024· Updated Jun 17, 2026

CVE-2024-7927

CVE-2024-7927

Description

A vulnerability classified as critical was found in ZZCMS 2023. Affected by this vulnerability is an unknown functionality of the file /admin/class.php?dowhat=modifyclass. The manipulation of the argument skin[] leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Affected products

3
  • Zzcms/Zzcms3 versions
    cpe:2.3:a:zzcms:zzcms:2023:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:zzcms:zzcms:2023:*:*:*:*:*:*:*
    • (no CPE)
    • (no CPE)range: 2023

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.