A remote code execution (RCE) vulnerability in template_user.php of ZZCMS version 2018 allows attackers to execute arbitrary PHP code via the “ml” and “title” parameters.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-19822
Reference (s):
- https://github.com/seabird1992/TEST123/blob/master/071711233468_0zzcms.pdf