CVE-2019-12355: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /user/dlsprint.php when the attacker has dlsprint authority via the id parameter...