CVE-2022-23881 PoC — ZZZCMS zzzphp 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-23881.yaml

Associated Vulnerability

Title:ZZZCMS zzzphp 安全漏洞 (CVE-2022-23881)
Description:ZZZCMS zzzphp是一套内容管理系统（CMS）。 ZZZCMS zzzphp v2.1.0 版本存在安全漏洞，该漏洞源于 zzz_template.php 中的 danger_key() 函数对用户传入参数的不完全过滤。

Description

ZZZCMS zzzphp v2.1.0 is susceptible to a remote command execution vulnerability via danger_key() at zzz_template.php.

File Snapshot


 id: CVE-2022-23881

info:
  name: ZZZCMS zzzphp 2.1.0 - Remote Code Execution
  author: pikpikcu
  s

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!