CVE-2018-13980
Published · Updated
60Vexday Risk Score
Patch now. It exploitation observed by VulnCheck and has a working public exploit.
ssvc Actepss 6.9%
from disclosure to weapon0 days
Published on NVDJul 16
1st PoCJul 13
VulnCheck+2989d
exploitation probability
6.9%top 6% of all CVEs
observed exploitation
yesVulnCheck
3 public exploit(s)
The websites that were built from Zeta Producer Desktop CMS before 14.2.1 are vulnerable to unauthenticated file disclosure if the plugin "filebrowser" is installed, because of assets/php/filebrowser/filebrowser.main.php?file=../ directory traversal.
Affected products
n/a · n/apublic PoCs found — 3
exploitdbwww.exploit-db.com/exploits/45016unverifiedcve_referencepacketstormsecurity.com/files/148537/Zeta-Producer-Desktop-CMS-14.2.0-Code-Execution-File-Disclosure.htmlunverifiedcve_referencewww.exploit-db.com/exploits/45016/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.