CVE-2018-17798

An issue was discovered in zzcms 8.3. user/ztconfig.php allows remote attackers to delete arbitrary files via an absolute pathname in the oldimg parameter in an action=modify request. This can be leveraged for database access by deleting install.lock.

CVSS v3.0

6.5 MEDIUMCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

CVSS v2.0

5.5 MEDIUMAV:N/AC:L/Au:S/C:N/I:P/A:P

EPSS

1.17% chance of exploitation in the next 30 days, 65th percentile

Published

2018-09-30

Updated

2024-08-05

Proof-of-concept exploits (1)

• seedis/zzcms/blob/master/arbitrary_file_deletion2.md

References

• CVE Record
• NVD entry

Related

• CVE-2018-17412
• CVE-2018-17414
• CVE-2018-17415
• CVE-2018-17416
• CVE-2018-17797
• CVE-2018-18381