CVE-2019-9182

State: Published
Severity: Not scored
Published: Feb 26, 2019
Updated: Dec 9, 2025
Reserved: Feb 26, 2019

Description

There is a CSRF in ZZZCMS zzzphp V1.6.1 via a /admin015/save.php?act=editfile request. It allows PHP code injection by providing a filename in the file parameter, and providing file content in the filetext parameter.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

http://www.iwantacve.cn/index.php/archives/119/
https://www.exploit-db.com/exploits/46488
https://packetstorm.news/files/id/151967

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.