CVE-2019-16722

ZZZCMS zzzphp v1.7.2 has an insufficient protection mechanism against PHP Code Execution, because passthru bypasses an str_ireplace operation.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2019-09-23

Last modified

2024-08-05

Affected products

• Zzzphp (Zzzcms)

References

• http://www.iwantacve.cn/index.php/archives/348/