EUVD-2018-10504

Malware in sbrugna...

CVE-2018-18788: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in zzcms 8.3. SQL Injection exists in admin/classmanage.php via the tablename parameter. This needs an admin user login...

PT-2018-14652

Name of the Vulnerable Software and Affected Versions zzcms version 8.3 Description An issue exists in the software, where SQL Injection is possible in the admin/classmanage.php file via the tablename parameter. This issue requires an admin user to be logged in. Recommendations For zzcms version...