Cyber Resilience

CVE-2023-5263

Zzzcms 2.1.7

Public PoC
Published
29 September 2023
Modified
21 November 2024
CVSS Score v3.1 6.3
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
EPSS Score 0.0064 48th percentile
Risk Priority 50 floored blend · peak EPSS

Summary

CVE-2023-5263 is a medium-severity an unspecified weakness vulnerability in Zzzcms Zzzcms. Its CVSS base score is 6.3 (Medium).

Operationally, ranked at the 48th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

EU & UK References

Vulnerability Data

A vulnerability was found in ZZZCMS 2.1.7 and classified as critical. Affected by this issue is the function restore of the file /admin/save.php of the component Database Backup File Handler. The manipulation leads to permission issues. The attack may be…

more

launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-240872.

CWE(s)
CWE-275

Related Threats

CVEs Like This One

CVE-2023-45555Same product: Zzzcms Zzzcms
CVE-2023-5582Same product: Zzzcms Zzzcms
CVE-2023-45554Same product: Zzzcms Zzzcms
CVE-2023-45909Same vendor: Zzzcms
CVE-2022-23881Same vendor: Zzzcms
CVE-2023-6762Shared CWE-275
CVE-2023-3759Shared CWE-275
CVE-2024-3118Shared CWE-275
CVE-2025-53168Shared CWE-275
CVE-2026-28553Shared CWE-275

Affected Assets

zzzcms
zzzcms
2.1.7

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References