CVE-2019-9182: CSRF

Published Feb 26, 2019

Updated

There is a CSRF in ZZZCMS zzzphp V1.6.1 via a /admin015/save.php?act=editfile request. It allows PHP code injection by providing a filename in the file parameter, and providing file content in the filetext parameter.

Affected Software

1 affected component

ZZZCMS zzzphp=1.6.1

Event History

Feb 26, 2019

CVE Published

via MITRE·07:00 AM

Data Sourced

via MITRE·07:00 AM

Description

Data Sourced

via NVD·07:29 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2019-9182?

The severity of CVE-2019-9182 is high, with a severity value of 8.8.

How does CVE-2019-9182 affect ZZZCMS zzzphp?

CVE-2019-9182 affects ZZZCMS zzzphp version 1.6.1.

What is the vulnerability in CVE-2019-9182?

The vulnerability in CVE-2019-9182 is a CSRF (Cross-Site Request Forgery) allowing PHP code injection.

How can an attacker exploit CVE-2019-9182?

An attacker can exploit CVE-2019-9182 by sending a specially crafted request to /admin015/save.php?act=editfile, providing a filename in the file parameter, and file content in the filetext parameter.

Is there a fix available for CVE-2019-9182?

At the moment, there is no known fix available for CVE-2019-9182. It is recommended to update to a patched version or apply any official security updates provided by the vendor.