CVE-2020-19961

ZZCMS 2019 is vulnerable to a SQL injection via the subzs.php component, affecting ZZCMS versions around 2019. The root cause is lack of proper input filtering/escaping in subzs.php, enabling an attacker to retrieve sensitive database data. Public disclosures come from multiple sources (NVD, Red ...