EDB-46488

PoC

zzzphp CMS 1.6.1 - Cross-Site Request Forgery

view exploit source exploit_dbtype webappsauthor Yang Chenglongpublished 2019-03-04catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2019-9082US	high8.8OT critical	97.4% (100th)	KEV	2019-02-24
ThinkPHP before 3.2.4, as used in Open Source BMS v1.1.1 and other products, allows Remote Command Execution via public//?s=index/\think\app/invokefunction&function=call_user_func_…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.