ch35h1r3c47/cve-2022-44136-pocZenar CMS 9.3 suffers from an unrestricted file upload vulnerability in its file management module, allowing authenticated attackers (with minimal privileges) to upload arbitrary files, including malicious PHP scripts, to the web server.
Zenar CMS 9.3 suffers from an unrestricted file upload vulnerability in its file management module, allowing authenticated attackers (with minimal privileges) to upload arbitrary files, including malicious PHP scripts, to the web server. Due to insufficient file extension validation and improper sanitization, an attacker can execute arbitrary code on the target system by uploading a crafted payload (e.g., a web shell) and accessing it via the web root.
