A vulnerability was found in ZZCMS 2023. It has been rated as problematic. This issue affects some unknown processing of the file 3/E_bak5.1/upload/eginfo.php. The manipulation of the argument phome with the input
ShowPHPInfo
leads to information disclosure.
The identification of this vulnerability is CVE-2024-7925. The attack may be initiated remotely. Furthermore, there is an exploit available.