3 matches found
CVE-2019-12350: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in zzcms 2019. SQL Injection exists in dl/dldownload.php via an id parameter value with a trailing comma...
9.8CVSS8.2AI score0.01398EPSS
SaveExploits1References2
CVE-2021-40282
An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, abd 2021 in dl/dldownload.php. when registering ordinary users...
8.8CVSS0.01149EPSS
SaveExploits1References1
CVE-2021-40282: Improper Neutralization of Special Elements used in an SQL Command
An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, abd 2021 in dl/dldownload.php. when registering ordinary users...
8.8CVSS5.8AI score0.01149EPSS
SaveExploits1References2
20