CVE-2024-44817

SQL Injection vulnerability in ZZCMS v.2023 and before allows a remote attacker to obtain sensitive information via the id parameter in the adv2.php component.

Score

CVSS 3.1 8.8 High

Status

Analyzed - cve@mitre.org

Published

2024-09-04

Last modified

2024-09-04

Weaknesses

CWE-89

Affected products

• Zzcms (Zzcms)

References

• https://github.com/gkdgkd123/codeAudit/blob/main/CVE-2024-44817%20ZZCMS2023SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md