Vulnerability Details : CVE-2023-5263
Potential exploit
A vulnerability was found in ZZZCMS 2.1.7 and classified as critical. Affected by this issue is the function restore of the file /admin/save.php of the component Database Backup File Handler. The manipulation leads to permission issues. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-240872.
Products affected by CVE-2023-5263
- cpe:2.3:a:zzzcms:zzzcms:2.1.7:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2023-5263
0.35%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 54 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2023-5263
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
6.5
|
MEDIUM | AV:N/AC:L/Au:S/C:P/I:P/A:P |
8.0
|
6.4
|
VulDB | |
|
6.3
|
MEDIUM | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L |
2.8
|
3.4
|
VulDB | |
|
6.3
|
MEDIUM | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L |
2.8
|
3.4
|
VulDB | 2024-02-29 |
|
8.8
|
HIGH | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
2.8
|
5.9
|
NIST |
CWE ids for CVE-2023-5263
-
Assigned by: cna@vuldb.com (Primary)
References for CVE-2023-5263
-
https://vuldb.com/?id.240872
CVE-2023-5263: ZZZCMS Database Backup File save.php restore permissionThird Party Advisory
-
https://github.com/yhy217/zzzcms-vul/issues/1
logic vulnerability exists in zzzcms · Issue #1 · yhy217/zzzcms-vul · GitHubExploit;Issue Tracking;Third Party Advisory
-
https://vuldb.com/?ctiid.240872
CVE-2023-5263: ZZZCMS Database Backup File save.php restore permissionPermissions Required;Third Party Advisory
Jump to