Sql injection

zzcms v8.3 has a SQL injection in /user/jobmanage.php via the bigclass parameter...

CVE-2018-17414

CVE-2018-17414 affects zzcms v8.3, with an SQL injection in /user/jobmanage.php via the bigclass parameter. A remote attacker could execute SQL commands due to improper input handling; CNVD-2019-13262 and NVD entries describe the issue and high CVSS impact (3.0: 8.8). No fix/patch details are pro...

PT-2019-9467

Name of the Vulnerable Software and Affected Versions zzcms version 8.3 Description The issue is related to a SQL injection in the /user/jobmanage.php endpoint via the bigclass parameter. Recommendations For zzcms version 8.3, avoid using the bigclass parameter in the /user/jobmanage.php endpoint...

CVE-2018-17414: Improper Neutralization of Special Elements used in an SQL Command

zzcms v8.3 has a SQL injection in /user/jobmanage.php via the bigclass parameter...