Vulnerabilities > CVE-2022-27128 - Unspecified vulnerability in Zbzcms 1.0
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
An incorrect access control issue at /admin/run_ajax.php in zbzcms v1.0 allows attackers to arbitrarily add administrator accounts.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 1 |