Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2018-1000653

Description

zzcms version 8.3 and earlier contains a SQL Injection vulnerability in zt/top.php line 5 that can result in could be attacked by sql injection in zzcms in nginx. This attack appear to be exploitable via running zzcms in nginx.

POC

Reference

- https://gist.github.com/Lz1y/3388fa886a3e10edd2a7e93d3c3e5b6c

Github

No PoCs found on GitHub currently.