Zimbra 未授权 命令注入漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://netc.shcmusic.edu.cn/2022/0621/c1811a39828/pagem.htm
• https://info.sdju.edu.cn/2022/0624/c6627a98681/page.htm
• https://blog.csdn.net/qq_29607687/article/details/142685311
• https://wx.zsxq.com/topic/4848544414511188
• https://projectdiscovery.io/blog/zimbra-remote-code-execution
• https://www.tenablecloud.cn/plugins/nessus/163072
• https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories
• https://www.hipaajournal.com/critical-zimbra-flaw-being-mass-exploited/
• https://nosec.org/m/share/5017.html
• https://www.secpod.com/blog/zimbra-fixes-actively-exploited-cve-2024-45519-flaw-allowing-unauthorised-code-execution/
• https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/Zimbra/CVE-2024-45519.md
• https://www.venustech.com.cn/new_type/aqtg/20241008/27930.html
• https://pentest-tools.com/vulnerabilities-exploits/zimbra-collaboration-suite-memcached-command-injection_28496

Related Vulnerabilities

• PoCCVE-2022-27924: Zimbra Collaboration Suite - Memcached Command Injection
• PoCCVE-2025-68645: Zimbra Collaboration - Local File Inclusion
• Zimbra Collaboration 存在本地文件包含漏洞（CVE-2025-68645）
• PoCZimbra Collaboration Suite /h javax.servlet.include.path_info 文件包含漏洞（CVE-2025-68645）
• PoCCVE-2025-27915: Zimbra - Cross-Site Scripting via ICS Files
• CVE-2019-9670: Zimbra Collaboration XXE
• PoCCVE-2013-7091: Zimbra Collaboration Server 7.2.2/8.0.2 Local File Inclusion
• PoCCVE-2018-14013: Synacor Zimbra Collaboration Suite Collaboration <8.8.11 - Cross-Site Scripting
• PoCCVE-2019-9670: Synacor Zimbra Collaboration <8.7.11p10 - XML External Entity Injection
• PoCCVE-2020-7796: Zimbra Collaboration Suite < 8.8.15 Patch 7 - Server-Side Request Forgery
• PoCCVE-2022-27926: Zimbra Collaboration (ZCS) - Cross Site Scripting
• PoCCVE-2022-37042: Zimbra Collaboration Suite 8.8.15/9.0 - Remote Code Execution