PT-2022-8085

Name of the Vulnerable Software and Affected Versions zzcms version 2019 Description An issue was discovered in the software, which allows for SQL injection via the id parameter in the "/admin/dl sendmail.php" API endpoint when an attacker has admin authority. Recommendations For zzcms version...

PT-2021-22851

Name of the Vulnerable Software and Affected Versions zzcms versions 8.2 through 8.3, 2020, 2021 Description The issue is related to an SQL Injection problem. It occurs via the id parameter in the "admin/dl sendmail.php" endpoint. Recommendations For versions 8.2, 8.3, 2020, and 2021, consider...