File and Path Handling

Every one of the 20 is a mark on the map. Named now: 1 to 20, most at risk first.

1. ZZCMS 2022 - Path Information DisclosureCVE-2022-40443Zzcms · CVSS 5.3 · 2.7% likely

   CWE-22

2. admin/dl_data.php in zzcms 2018 (2018-10-19) allows remote attackers to delete arbitrary files via action=del&filename=../ directory traversal.CVE-2019-8411Zzcms · 2.7% likely

   CWE-22

3. An issue was discovered in zzcms 8.2. user/adv.php allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg parameter. This can be leverag…CVE-2018-9331Zzcms · 2.6% likely

   CWE-22

4. An issue was discovered in zzcms 8.2. user/licence_save.php allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg parameter in an actio…CVE-2018-8969Zzcms · 2.6% likely

   CWE-22

5. An issue was discovered in zzcms 8.2. user/manage.php allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg or oldflv parameter in an a…CVE-2018-8968Zzcms · 2.6% likely

   CWE-22

6. An issue was discovered in zzcms 8.2. user/ppsave.php allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg parameter in an action=modi…CVE-2018-8965Zzcms · 2.6% likely

   CWE-22

7. zzcms 8.2 allows remote attackers to discover the full path via a direct request to 3/qq_connect2.0/API/class/ErrorCase.class.php or 3/ucenter_api/code/friend.php.CVE-2018-7434Zzcms · 2.3% likely

   CWE-22

8. zzcms zzmcms 8.3 and earlier is affected by: File Delete to getshell. The impact is: getshell. The component is: /user/ppsave.php.CVE-2019-1010151zzcms · 2.0% likely

   CWE-22

9. An issue was discovered in zzcms 8.3. It allows remote attackers to delete arbitrary files via directory traversal sequences in the flv parameter. This can be leveraged for databa…CVE-2018-16344Zzcms · 1.9% likely

   CWE-22

10. Directory Traversal vulnerability exists in ZZCMS 2021 via the skin parameter in 1) index.php, 2) bottom.php, and 3) top_index.php.CVE-2021-45286Zzcms · 1.7% likely

    CWE-22

11. ZZCMS list.php path traversalCVE-2024-7924Zzcms · CVSS 5.3 · 1.4% likely

    CWE-22

12. An issue was discovered in zzcms 8.3. user/zssave.php allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg parameter in an action=modi…CVE-2018-17797Zzcms · 1.4% likely

    CWE-22

13. An issue was discovered in zzcms 8.3. user/ztconfig.php allows remote attackers to delete arbitrary files via an absolute pathname in the oldimg parameter in an action=modify requ…CVE-2018-17798Zzcms · 1.2% likely

    CWE-22

14. ZZCMS 2023 has a file upload vulnerability in 3/E_bak5.1/upload/index.php, allowing attackers to exploit this loophole to gain server privileges and execute arbitrary code.CVE-2023-50104Zzcms · 1.1% likely

    CWE-434

15. ZZCMS 2022 was discovered to contain a full path disclosure vulnerability via the page /admin/index.PHP? _server.CVE-2022-40444Zzcms · CVSS 5.3 · 1.0% likely

    CWE-22

16. ZZCMS class.php path traversalCVE-2024-7927Zzcms · CVSS 7.3 · 0.9% likely

    CWE-22

17. ZZCMS about_edit.php path traversalCVE-2024-7926Zzcms · CVSS 7.3 · 0.9% likely

    CWE-22

18. An arbitrary file deletion vulnerability exists in the admin/del.php file at line 62 in ZZCMS 2023 and earlier. Due to insufficient validation and sanitization of user input for f…CVE-2024-43011Zzcms · CVSS 4.9 · 0.7% likely

    CWE-22

19. ZZCMS functions.php Ebak_SetGotoPak unrestricted uploadCVE-2024-10293Zzcms · CVSS 6.3 · 0.5% likely

    CWE-434

20. ZZCMS ChangeTable.php unrestricted uploadCVE-2024-10292Zzcms · CVSS 6.3 · 0.5% likely

    CWE-434

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.