泽元-ZCMS 存在登陆绕过漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://wy.zone.ci/bug_detail.php?wybug_id=wooyun-2011-02750
• https://qkl.seebug.org/vuldb/ssvid-89586
• https://avd.aliyun.com/detail?id=AVD-2015-7346
• https://qkl.seebug.org/appdir/ZCMS
• https://www.cnblogs.com/AtesetEnginner/p/11149374.html

Related Vulnerabilities

• PoCCVE-2019-10647: ZZZCMS ZZZPHP 1.6.3 – Remote PHP Code Execution (RCE)
• zcms-v3-sqli: zcms v3 sqli
• zzcms-zsmanage-sqli: ZzCMS zsmanage sqli
• ZZZCMS /search/ 代码执行漏洞（CVE-2019-9041）
• PoCCVE-2019-9041: ZZZCMS 1.6.1 - Remote Code Execution
• PoCCVE-2020-20285: ZZcms - Cross-Site Scripting
• PoCCVE-2022-23881: ZZZCMS zzzphp 2.1.0 - Remote Code Execution
• PoCCVE-2022-40443: ZZCMS 2022 - Path Information Disclosure
• PoCzzzcms-parser-search-rce: ZZZCMS parserSearch 远程命令执行漏洞
• PoCzcms-v3-sqli: ZCMS - SQL Injection
• PoCzzcms-register-xss: Zzcms `register_nodb.php` - Cross Site Scripting
• PoCzzcms-xss: ZZCMS - Cross-Site Scripting