CVE-2019-12356: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /user/dlsdownload.php when the attacker has dlsdownload authority via the id parameter...