CVE-2024-0603

A vulnerability classified as critical has been found in ZhiCms up to 4.0. This affects an unknown part of the file app/plug/controller/giftcontroller.php. The manipulation of the argument mylike leads to deserialization. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-250839.

• CWE-502

• https://note.zhaoj.in/share/n3QsNbORUR0eBroken Link
• https://vuldb.com/?ctiid.250839Third Party Advisory
• https://vuldb.com/?id.250839Third Party Advisory
• https://note.zhaoj.in/share/n3QsNbORUR0eBroken Link
• https://vuldb.com/?ctiid.250839Third Party Advisory
• https://vuldb.com/?id.250839Third Party Advisory

Published

Jan 16, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-0596The Awesome Support – WordPress HelpDesk & Support Plugin pl…5.3
• CVE-2024-0597The SEO Plugin by Squirrly SEO plugin for WordPress is vulne…4.8
• CVE-2024-0598The Gutenberg Blocks by Kadence Blocks – Page Builder Featur…4.8
• CVE-2024-0599A vulnerability was found in Jspxcms 10.2.0. It has been dec…5.4
• CVE-2024-0601A vulnerability was found in ZhongFuCheng3y Austin 1.0. It h…6.5
• CVE-2024-0602The YARPP – Yet Another Related Posts Plugin plugin for Word…4
• CVE-2024-0604The Best WordPress Gallery Plugin – FooGallery plugin for Wo…4.8
• CVE-2024-0605Using a javascript: URI with a setTimeout race condition, an…7.5
• CVE-2024-0606An attacker could execute unauthorized script on a legitimat…6.1
• CVE-2024-0607A flaw was found in the Netfilter subsystem in the Linux ker…6.6
• CVE-2024-0608The WP ERP | Complete HR solution with recruitment & job lis…6.5
• CVE-2024-0609The WP ERP | Complete HR solution with recruitment & job lis…6.1