Security Advisory
CVE-2024-44820
6.1
MEDIUM
Vulnerability Description
A sensitive information disclosure vulnerability exists in ZZCMS v.2023 and before within the eginfo.php file located at /3/E_bak5.1/upload/. When accessed with the query parameter phome=ShowPHPInfo, the application executes the phpinfo() function, which exposes detailed information about the PHP environment, including server configuration, loaded modules, and environment variables.
Published Date
September 4, 2024
Official Source
NIST NVD Advisory