CVE-2020-19959: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive data via the dlid parameter in the /dl/dlsendmail.php page cookie...

CVE-2018-14961: Improper Neutralization of Special Elements used in an SQL Command

dl/dlsendmail.php in zzcms 8.3 has SQL Injection via the sql parameter...