VDB-275111 · CVE-2024-7925 · CVE-2024-44820

ZZCMS 2023 eginfo.php phome Bayani fitowa

Hakika vulnerability da aka rarraba a matsayin karshewa an gano a ZZCMS 2023. Tabbas, aikin $software_function ne ke da matsala; idan ba a bayyana ba, to aiki ce da ba a sani ba, a cikin laburare $software_library, a cikin fayil 3/E_bak5.1/upload/eginfo.php, a cikin sashi $software_component. Wuro manipulation of the argument phome with the input ShowPHPInfo ga Bayani fitowa. Amfani da CWE wajen bayyana matsala yana kaiwa CWE-200. Lalle, rauni an sanar da shi 08/19/2024. Ana samun bayanin tsaro don saukewa a gitee.com. Ana kiran wannan rauni da CVE-2024-7925. Ngam yiɗi ka a tuma ndiyam ka nder waya. Bayani na fasaha ga. Kuma, akwai exploit. Exploit ɗin an bayyana wa jama'a, za a iya amfani da shi. A sa'i, exploit might be approx. USD $0-$5k ndiyam. Á yí huɗɗi-na-gaskiya. Za a iya samun exploit a gitee.com. 0-day ga, an ndiyam a wuro be $0-$5k. Entry ɗin nan yana da duplicate CVE-2024-44820 da aka haɗa masa. If you want to get the best quality for vulnerability data then you always have to consider VulDB.

4 Goyarwa · 87 Datenpunkte

Furɗe	Súgá 08/19/2024 15:49	Gargadi 1/3 08/21/2024 03:20	Gargadi 2/3 09/30/2024 07:48	Gargadi 3/3 09/30/2024 07:51
cvss4_vuldb_ui	N	N	N	N
cvss4_vuldb_vc	L	L	L	L
cvss4_vuldb_vi	N	N	N	N
cvss4_vuldb_va	N	N	N	N
cvss4_vuldb_e	P	P	P	P
cvss2_vuldb_au	S	S	S	S
cvss2_vuldb_rl	ND	ND	ND	ND
cvss3_vuldb_pr	L	L	L	L
cvss3_vuldb_rl	X	X	X	X
cvss4_vuldb_at	N	N	N	N
cvss4_vuldb_pr	L	L	L	L
cvss4_vuldb_sc	N	N	N	N
cvss4_vuldb_si	N	N	N	N
cvss4_vuldb_sa	N	N	N	N
cvss2_vuldb_basescore	4.0	4.0	4.0	4.0
cvss2_vuldb_tempscore	3.4	3.4	3.4	3.4
cvss3_vuldb_basescore	4.3	4.3	4.3	4.3
cvss3_vuldb_tempscore	3.9	3.9	3.9	3.9
cvss3_meta_basescore	4.3	5.4	5.4	5.4
cvss3_meta_tempscore	3.9	5.2	5.2	5.2
cvss4_vuldb_bscore	5.3	5.3	5.3	5.3
cvss4_vuldb_btscore	2.1	2.1	2.1	2.1
advisory_date	1724018400 (08/19/2024)	1724018400 (08/19/2024)	1724018400 (08/19/2024)	1724018400 (08/19/2024)
price_0day	$0-$5k	$0-$5k	$0-$5k	$0-$5k
software_name	ZZCMS	ZZCMS	ZZCMS	ZZCMS
software_version	2023	2023	2023	2023
software_file	3/E_bak5.1/upload/eginfo.php	3/E_bak5.1/upload/eginfo.php	3/E_bak5.1/upload/eginfo.php	3/E_bak5.1/upload/eginfo.php
software_argument	phome	phome	phome	phome
input_value	ShowPHPInfo	ShowPHPInfo	ShowPHPInfo	ShowPHPInfo
vulnerability_cwe	CWE-200 (Bayani fitowa)	CWE-200 (Bayani fitowa)	CWE-200 (Bayani fitowa)	CWE-200 (Bayani fitowa)
vulnerability_risk	1	1	1	1
cvss3_vuldb_av	N	N	N	N
cvss3_vuldb_ac	L	L	L	L
cvss3_vuldb_ui	N	N	N	N
cvss3_vuldb_s	U	U	U	U
cvss3_vuldb_c	L	L	L	L
cvss3_vuldb_i	N	N	N	N
cvss3_vuldb_a	N	N	N	N
cvss3_vuldb_e	P	P	P	P
cvss3_vuldb_rc	R	R	R	R
advisory_url	https://gitee.com/A0kooo/cve_article/blob/master/zzcms/information_leak/Zenmus%20ekinfo.php%20had%20an%20information%20leak.md	https://gitee.com/A0kooo/cve_article/blob/master/zzcms/information_leak/Zenmus%20ekinfo.php%20had%20an%20information%20leak.md	https://gitee.com/A0kooo/cve_article/blob/master/zzcms/information_leak/Zenmus%20ekinfo.php%20had%20an%20information%20leak.md	https://gitee.com/A0kooo/cve_article/blob/master/zzcms/information_leak/Zenmus%20ekinfo.php%20had%20an%20information%20leak.md
exploit_availability	1	1	1	1
exploit_publicity	1	1	1	1
exploit_url	https://gitee.com/A0kooo/cve_article/blob/master/zzcms/information_leak/Zenmus%20ekinfo.php%20had%20an%20information%20leak.md	https://gitee.com/A0kooo/cve_article/blob/master/zzcms/information_leak/Zenmus%20ekinfo.php%20had%20an%20information%20leak.md	https://gitee.com/A0kooo/cve_article/blob/master/zzcms/information_leak/Zenmus%20ekinfo.php%20had%20an%20information%20leak.md	https://gitee.com/A0kooo/cve_article/blob/master/zzcms/information_leak/Zenmus%20ekinfo.php%20had%20an%20information%20leak.md
source_cve	CVE-2024-7925	CVE-2024-7925	CVE-2024-7925	CVE-2024-7925
cna_responsible	VulDB	VulDB	VulDB	VulDB
software_type	Content Management System	Content Management System	Content Management System	Content Management System
cvss2_vuldb_av	N	N	N	N
cvss2_vuldb_ac	L	L	L	L
cvss2_vuldb_ci	P	P	P	P
cvss2_vuldb_ii	N	N	N	N
cvss2_vuldb_ai	N	N	N	N
cvss2_vuldb_e	POC	POC	POC	POC
cvss2_vuldb_rc	UR	UR	UR	UR
cvss4_vuldb_av	N	N	N	N
cvss4_vuldb_ac	L	L	L	L
cve_nvd_summary		A vulnerability was found in ZZCMS 2023. It has been rated as problematic. This issue affects some unknown processing of the file 3/E_bak5.1/upload/eginfo.php. The manipulation of the argument phome with the input ShowPHPInfo leads to information disclosure. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.	A vulnerability was found in ZZCMS 2023. It has been rated as problematic. This issue affects some unknown processing of the file 3/E_bak5.1/upload/eginfo.php. The manipulation of the argument phome with the input ShowPHPInfo leads to information disclosure. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.	A vulnerability was found in ZZCMS 2023. It has been rated as problematic. This issue affects some unknown processing of the file 3/E_bak5.1/upload/eginfo.php. The manipulation of the argument phome with the input ShowPHPInfo leads to information disclosure. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
cve_nvd_summaryes		Una vulnerabilidad fue encontrada en ZZCMS 2023 y ha sido calificada como problemática. Este problema afecta un procesamiento desconocido del archivo 3/E_bak5.1/upload/eginfo.php. La manipulación del argumento phome con la entrada ShowPHPInfo conduce a la divulgación de información. El ataque puede iniciarse de forma remota. El exploit ha sido divulgado al público y puede utilizarse.	Una vulnerabilidad fue encontrada en ZZCMS 2023 y ha sido calificada como problemática. Este problema afecta un procesamiento desconocido del archivo 3/E_bak5.1/upload/eginfo.php. La manipulación del argumento phome con la entrada ShowPHPInfo conduce a la divulgación de información. El ataque puede iniciarse de forma remota. El exploit ha sido divulgado al público y puede utilizarse.	Una vulnerabilidad fue encontrada en ZZCMS 2023 y ha sido calificada como problemática. Este problema afecta un procesamiento desconocido del archivo 3/E_bak5.1/upload/eginfo.php. La manipulación del argumento phome con la entrada ShowPHPInfo conduce a la divulgación de información. El ataque puede iniciarse de forma remota. El exploit ha sido divulgado al público y puede utilizarse.
cvss3_nvd_av		N	N	N
cvss3_nvd_ac		L	L	L
cvss3_nvd_pr		N	N	N
cvss3_nvd_ui		N	N	N
cvss3_nvd_s		U	U	U
cvss3_nvd_c		H	H	H
cvss3_nvd_i		N	N	N
cvss3_nvd_a		N	N	N
cvss3_nvd_basescore		7.5	7.5	7.5
cvss3_cna_av		N	N	N
cvss3_cna_ac		L	L	L
cvss3_cna_pr		L	L	L
cvss3_cna_ui		N	N	N
cvss3_cna_s		U	U	U
cvss3_cna_c		L	L	L
cvss3_cna_i		N	N	N
cvss3_cna_a		N	N	N
cvss3_cna_basescore		4.3	4.3	4.3
cvss2_cna_av		N	N	N
cvss2_cna_ac		L	L	L
cvss2_cna_au		S	S	S
cvss2_cna_ci		P	P	P
cvss2_cna_ii		N	N	N
cvss2_cna_ai		N	N	N
cvss2_cna_basescore		4	4	4
cve_duplicate			CVE-2024-44820	CVE-2024-44820
source_misc				https://github.com/gkdgkd123/codeAudit/blob/main/CVE-2024-44820%20ZZCMS2023%20phpinfo%E6%B3%84%E9%9C%B2.md

◂ Gurɗo Gumti Gada ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!