What is the vulnerability ID of this zzcms vulnerability?

The vulnerability ID of this zzcms vulnerability is CVE-2019-1010150.

What is the impact of CVE-2019-1010150?

The impact of CVE-2019-1010150 is to getshell, which allows for code execution.

What component is affected by CVE-2019-1010150?

The component affected by CVE-2019-1010150 is /user/zssave.php.

What is the severity of CVE-2019-1010150?

The severity of CVE-2019-1010150 is critical with a CVSS score of 9.8.

How can I fix CVE-2019-1010150 in zzcms 8.3 and earlier?

To fix CVE-2019-1010150 in zzcms 8.3 and earlier, update to a version that is not affected by the vulnerability.

Vulnerability/
CVE-2019-1010150

critical

9.8

CWE

862

23/7/2019

21/7/2021

CVE-2019-1010150

First published: Tue Jul 23 2019(Updated: )

zzcms 8.3 and earlier is affected by: File Delete to Code Execution. The impact is: getshell. The component is: /user/zssave.php.

Credit: josh@bress.net

Affected Software	Affected Version	How to fix
Zzcms Zzcms	<=8.3

Never miss a vulnerability like this again

Reference Links

https://gist.github.com/Lz1y/7ab529230c43dfc5441ac32dd13e3e5b

Frequently Asked Questions

What is the vulnerability ID of this zzcms vulnerability?
The vulnerability ID of this zzcms vulnerability is CVE-2019-1010150.
What is the impact of CVE-2019-1010150?
The impact of CVE-2019-1010150 is to getshell, which allows for code execution.
What component is affected by CVE-2019-1010150?
The component affected by CVE-2019-1010150 is /user/zssave.php.
What is the severity of CVE-2019-1010150?
The severity of CVE-2019-1010150 is critical with a CVSS score of 9.8.
How can I fix CVE-2019-1010150 in zzcms 8.3 and earlier?
To fix CVE-2019-1010150 in zzcms 8.3 and earlier, update to a version that is not affected by the vulnerability.

collector/nvd-index
vendor/zzcms
canonical/zzcms zzcms
version/zzcms zzcms/8.3

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.