CVE-2019-9041

An issue was discovered in ZZZCMS zzzphp V1.6.1

published February 23, 2019

CVSS
—
EPSS
31%
Percentile
98.3
In the wild
Unconfirmed
What it is

An issue was discovered in ZZZCMS zzzphp V1.6.1. In the inc/zzz_template.php file, the parserIfLabel() function's filtering is not strict, resulting in PHP code execution, as demonstrated by the if:assert substring.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.31421 · 98.3th percentile
Published
2019-02-23T18:00Z
EPSS history
Timeline
  • 22 SEP 03:18Z
    EPSS moved 31% → 18%
    epss
  • 06 SEP 03:13Z
    EPSS moved 31% → 18%
    epss
  • 30 AUG 16:02Z
    EPSS moved 18% → 31%
    epss
  • 29 AUG 04:57Z
    EPSS moved 31% → 18%
    epss
  • 23 FEB 18:00Z
    An issue was discovered in ZZZCMS zzzphp V1.6.1
    cvelistv5