PoC Index85,100 CVEs with PoCs

CVE-2018-9331

HIGH 7.5EPSS 2.6%

An issue was discovered in zzcms 8.2. user/adv.php allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg parameter. This can be leveraged for database access by deleting install.lock.

CVSS v3.1 NVD
7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS v2.0 NVD
6.4 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:P
EPSS
2.56% chance of exploitation in the next 30 days, 85th percentile
Published
2018-04-07
Updated
2024-08-05

Proof-of-concept exploits (1)

References