CNNVD-202509-2025 Information
Sep 15, 2025
cve
CNNVD ID
CNNVD-202509-2025
Related CVE
- CNNVD Published: 2025-09-15
Description (Chinese)
ZKEACMS是ZKEASOFT开源的一个视觉设计、所见即所得的内容管理系统。 ZKEACMS 4.3版本存在代码问题漏洞，该漏洞源于对文件src/ZKEACMS/Controllers/MediaController.cs中函数Proxy的参数url的错误操作，可能导致服务端请求伪造。
Description (English)
ZKEACMS is a visual, visible and generated content management system for ZKEASOFT. ZKEACMS version 4.3 has a code problem loophole, which stems from an error in the url of the Proxy function in file src/ZKEACMS/Controllers/MediaController.cs, which may result in the forgery of service requests.
Hazard Level
High
Vulnerability Type
代码问题
Affected Vendor
ZKEASOFT
Published
2025-09-15
Last Modified
2026-02-24
References
https://github.com/August829/Yu/blob/main/58ead8e7e08bfb022.md https://github.com/August829/Yu/blob/main/58ead8e7e08bfb022.md#poc https://vuldb.com/?ctiid.323890 https://vuldb.com/?id.323890 https://vuldb.com/?submit.648387
Share on: