EUVD-2018-9169

Malware in sbrugna...

CVE-2018-17415: Improper Neutralization of Special Elements used in an SQL Command

zzcms V8.3 has a SQL injection in /user/zselite.php via the id parameter...