CVE-2024-10293CWE-434

ZZCMS functions.php Ebak_SetGotoPak unrestricted upload

Medium · published October 23, 2024

CVSS v4.0
5.3
EPSS
1%
Percentile
43.1
In the wild
Unconfirmed
What it is

A vulnerability was found in ZZCMS 2023. It has been classified as critical. Affected is the function Ebak_SetGotoPak of the file 3/Ebbak5.1/upload/class/functions.php. The manipulation of the argument file leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

The record
Technical detail
CVSS v4.0
5.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
EPSS
0.00517 · 43.1th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2024-10-23T16:00Z
EPSS history
Timeline
  • 23 OCT 16:00Z
    ZZCMS functions.php Ebak_SetGotoPak unrestricted upload
    cvelistv5