CVE-2021-43703

Exploit

EPSS 0.86%
Published 09.12.2021 17:15:08
Last modified 21.11.2024 06:29:39
Source cve@mitre.org
Teams watchlist Login
Open Login

An Incorrect Access Control vulnerability exists in zzcms less than or equal to 2019 via admin.php. After disabling JavaScript, you can directly access the administrator console.

Affected products Warnungen 0 Metrics 3 CWE 0 References 4

Data is provided by the National Vulnerability Database (NVD)

Zzcms ≫ Zzcms Version <= 2019

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.86%	0.741

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

https://github.com/forget-code/zzcms/issues/1

Third Party Advisory

Exploit

https://nvd.nist.gov/vuln/detail/CVE-2021-43703

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2021-43703

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2021-43703

EUVD