CVE-2023-31861

ZLMediaKit 4.0 is vulnerable to Directory Traversal.

• CWE-22
• CWE-22

• https://gist.github.com/nbb651/5aa72867fc1df3ef52e690b293964aacThird Party Advisory
• https://github.com/nbb651/CVE-ZLMediaKit/blob/main/README.mdExploit, Third Party Advisory
• https://gist.github.com/nbb651/5aa72867fc1df3ef52e690b293964aacThird Party Advisory
• https://github.com/nbb651/CVE-ZLMediaKit/blob/main/README.mdExploit, Third Party Advisory

Published

May 25, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-31853Cudy LT400 1.13.4 is vulnerable Cross Site Scripting (XSS) i…6.1
• CVE-2023-31854std::bad_alloc is mishandled in Precomp 0.4.8. NOTE: this is…
• CVE-2023-31856A command injection vulnerability in the hostTime parameter …9.8
• CVE-2023-31857Sourcecodester Online Computer and Laptop Store 1.0 allows u…9.8
• CVE-2023-3186The Popup by Supsystic WordPress plugin before 1.10.19 has a…9.8
• CVE-2023-31860Wuzhi CMS v3.1.2 has a storage type XSS vulnerability in the…5.4
• CVE-2023-31862jizhicms v2.4.6 is vulnerable to Cross Site Scripting (XSS).…5.4
• CVE-2023-31867Sage X3 version 12.14.0.50-0 is vulnerable to CSV Injection.7.2
• CVE-2023-31868Sage X3 version 12.14.0.50-0 is vulnerable to Cross Site Scr…5.4
• CVE-2023-3187A vulnerability, which was classified as critical, has been …5.4
• CVE-2023-31871OpenText Documentum Content Server before 23.2 has a flaw th…7.8
• CVE-2023-31873Gin 0.7.4 allows execution of arbitrary code when a crafted …7.8