Security Advisory

CVE-2018-8966

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-03-24 18:00:00

Last updated 2024-08-05 07:10:47

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

An issue was discovered in zzcms 8.2. It allows PHP code injection via the siteurl parameter to install/index.php, as demonstrated by injecting a phpinfo() call into /inc/config.php.

← Browse all CVEs View on cve.org ↗