Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2018-8966

An issue was discovered in zzcms 8.2. It allows PHP code injection via the siteurl parameter to install/index.php, as demonstrated by injecting a phpinfo() call into /inc/config.php.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 69.5%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
Products affected by CVE-2018-8966
  • Zzcms » Zzcms » Version: 8.2
    cpe:2.3:a:zzcms:zzcms:8.2


Products
Pricing
Contact Us

Shodan ® - All rights reserved