Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2021-32605 PoC — Zzzcms 操作系统命令注入漏洞

Source
https://github.com/Threekiii/Awesome-POC/blob/master/CMS%E6%BC%8F%E6%B4%9E/zzzcms%20v1.7.5%20%E5%89%8D%E5%8F%B0%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E.md
Associated Vulnerability
Title:Zzzcms 操作系统命令注入漏洞 (CVE-2021-32605)
Description:ZZZCMS zzzphp是一套内容管理系统（CMS）。 Zzzcms 2.0.4版本之前存在安全漏洞。该漏洞允许远程攻击者通过将任意命令放在"?location=search URI"的keys参数中来执行任意OS命令。
File Snapshot

 # zzzcms v1.7.5 前台远程命令执行漏洞

## 漏洞描述

zzzcms v1.7.5 parserSearch 存在模板注入导致远程命令执行漏洞。

参考链接：

- https://

...
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.