CVE-2019-12350

creationtimestamp| type| source ---|---|--- 2022-06-02 18:35:50+00:00| seen| https://t.me/cibsecurity/43692...

CVE-2019-12350

An issue was discovered in zzcms 2019. SQL Injection exists in dl/dldownload.php via an id parameter value with a trailing comma...

CVE-2019-12350

CVE-2019-12350 affects zzCMS (2019) with a SQL Injection in the script /dl/dl_download.php where an id parameter value with a trailing comma is unsafely handled. Root cause: lack of input filtering/validation for the id parameter, enabling injection. Consequences per the entry indicate a high-sev...