Sql injection

An issue was discovered in zzcms 8.3. SQL Injection exists in admin/tagmanage.php via the tabletag parameter. This needs an admin user login...

CVE-2018-18784

CVE-2018-18784 affects ZZCMS v8.3. The SQL injection exists in admin/tagmanage.php via the tabletag parameter and requires an admin login. CNVD notes a remote attacker could exploit this to obtain the MySQL current user name. Modes confirm concrete details: affected software (ZZCMS 8.3), vulnerab...