CVE-2022-23881: Critical severity zzzcms vulnerability

Published Mar 23, 2022

Updated

ZZZCMS zzzphp v2.1.0 was discovered to contain a remote command execution (RCE) vulnerability via dangerkey() at zzztemplate.php.

Affected Software

1 affected component

ZZZCMS zzzphp=2.1.0

Event History

Mar 23, 2022

CVE Published

via MITRE·08:09 PM

Data Sourced

via MITRE·08:09 PM

Description

Frequently Asked Questions

What is CVE-2022-23881?

CVE-2022-23881 is a critical vulnerability found in ZZZCMS zzzphp v2.1.0 that allows remote command execution (RCE) via the danger_key() function in zzz_template.php.

How severe is CVE-2022-23881?

CVE-2022-23881 is classified as critical with a severity value of 9.8 out of 10.

How does CVE-2022-23881 impact ZZZCMS zzzphp v2.1.0?

CVE-2022-23881 allows attackers to remotely execute commands on a system running ZZZCMS zzzphp v2.1.0 through the danger_key() function in zzz_template.php.

How can I fix CVE-2022-23881?

To fix CVE-2022-23881, it is recommended to update ZZZCMS zzzphp to a version that addresses the vulnerability.

Where can I find more information about CVE-2022-23881?

For more information about CVE-2022-23881, you can refer to the following link: [CVE-2022-23881](https://github.com/metaStor/Vuls/blob/main/zzzcms/zzzphp%20V2.1.0%20RCE/zzzphp%20V2.1.0%20RCE.md)