Vulnerability CVE-2024-7926


Published: 2024-08-19

Description:
A vulnerability classified as critical has been found in ZZCMS 2023. Affected is an unknown function of the file /admin/about_edit.php?action=modify. The manipulation of the argument skin leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Type:

CWE-22

(Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'))

 References:
https://vuldb.com/?id.275112
https://vuldb.com/?ctiid.275112
https://vuldb.com/?submit.392181
https://gitee.com/A0kooo/cve_article/blob/master/zzcms/Directory_traversal2/zzcms%20siteinfo.php%20Directory%20traversal.md

Copyright 2026, cxsecurity.com

 

Back to Top