CVE-2019-1010153

CVE-2019-1010153 affects ZZCMS 8.3 and earlier, with a SQL injection vulnerability in the zs/subzs.php component. The root cause is lack of validation of externally entered SQL statements in database-based applications. The impact is partial to full SQL execution depending on context, as describe...