CVE-2018-14961

SQL Injection in ZZCMS 8.3 (CVE-2018-14961) via the sql parameter in dl/dl_sendmail.php is documented across CNVD-2018-15398 and related sources. The vulnerability arises in ZZCMS’s handling of user-supplied values for the sql parameter, enabling arbitrary SQL execution. CNVD notes that a remote ...

CVE-2018-14961: Improper Neutralization of Special Elements used in an SQL Command

dl/dlsendmail.php in zzcms 8.3 has SQL Injection via the sql parameter...