CVE-2020-19822 – A remote code execution (RCE) vulnerability in template_user.php of ZZCMS

4 years ago

A remote code execution (RCE) vulnerability in template_user.php of ZZCMS version 2018 allows attackers to execute arbitrary PHP code via the “ml” and “title” parameters.

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-19822

Reference (s):

https://github.com/seabird1992/TEST123/blob/master/071711233468_0zzcms.pdf