CVE-2020-19960

creationtimestamp| type| source ---|---|--- 2021-10-14 18:27:40+00:00| seen| https://t.me/cibsecurity/30565...

CVE-2020-19960

CVE-2020-19960 affects ZZCMS (version 2019). The vulnerability is a SQL injection that can exfiltrate sensitive data via the dlid parameter in the application’s PHP pages (e.g., /dl/dl_sendsms.php cookie; CNVD references /dl_print.php). Root cause appears to be insufficient validation/external in...