Description
ZZCMS是中国ZZCMS团队的一套内容管理系统（CMS）。 ZZCMS 2023版本存在路径遍历漏洞，该漏洞源于文件/I/list.php的参数skin会导致路径遍历。
ZZCMS 路径遍历漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.cnvd.org.cn/flaw/show/CNVD-2024-38194
https://cve.imfht.com/detail/CVE-2024-7924
https://www.dptech.com/index.php?m=content&c=index&a=show&catid=75&id=5406
https://stack.chaitin.com/poc/detail/4998
https://www.sentinelone.com/vulnerability-database/cve-2024-7924/
https://vuldb.com/vuln/275112
https://nvd.nist.gov/vuln/detail/CVE-2024-7924
https://cvefeed.io/vuln/detail/CVE-2024-7926
https://github.com/advisories/GHSA-rvxx-h83g-7vgf