PT-2022-8090

Name of the Vulnerable Software and Affected Versions zzcms version 2019 Description An issue was discovered in zzcms, where there is a SQL injection vulnerability in the /dl/dl sendsms.php endpoint when the attacker has dls print authority, via the dlid cookie. Recommendations For zzcms version...

PT-2021-10426

Name of the Vulnerable Software and Affected Versions: zz cms version 2019 Description: A SQL injection issue allows attackers to retrieve sensitive data via the dlid parameter in the "/dl/dl sendsms.php" page cookie. Recommendations: For zz cms version 2019, consider restricting access to the...