CVE-2018-18784

CVE-2018-18784 affects ZZCMS v8.3. The SQL injection exists in admin/tagmanage.php via the tabletag parameter and requires an admin login. CNVD notes a remote attacker could exploit this to obtain the MySQL current user name. Modes confirm concrete details: affected software (ZZCMS 8.3), vulnerab...