CVE-2018-13056

The CVE-2018-13056 issue affects zzcms 8.3. A vulnerability in /user/del.php allows deleting arbitrary files by inserting a relative path into the zzcms_main table and triggering an img add request, which can be leveraged to delete install.lock and thereby enable access to the database. The conne...