CVE-2019-12348

An issue was discovered in zzcms 2019. SQL Injection exists in user/ztconfig.php via the daohang or img POST parameter...

PT-2021-8901

Name of the Vulnerable Software and Affected Versions zzcms version 2019 Description An issue exists in zzcms 2019 where SQL Injection is possible. This occurs in the user/ztconfig.php file via the daohang or img POST parameters. Recommendations For zzcms version 2019, consider restricting access...

CVE-2019-12348: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in zzcms 2019. SQL Injection exists in user/ztconfig.php via the daohang or img POST parameter...