CVE-2018-8966

An issue was discovered in zzcms 8.2

published March 24, 2018

CVSS
—
EPSS
2%
Percentile
77.8
In the wild
Unconfirmed
What it is

An issue was discovered in zzcms 8.2. It allows PHP code injection via the siteurl parameter to install/index.php, as demonstrated by injecting a phpinfo() call into /inc/config.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01765 · 77.8th percentile
Published
2018-03-24T18:00Z
EPSS history
Timeline
  • 24 MAR 18:00Z
    An issue was discovered in zzcms 8.2
    cvelistv5