4 matches found
PT-2022-8090
Name of the Vulnerable Software and Affected Versions zzcms version 2019 Description An issue was discovered in zzcms, where there is a SQL injection vulnerability in the /dl/dl sendsms.php endpoint when the attacker has dls print authority, via the dlid cookie. Recommendations For zzcms version...
PT-2022-8081
Name of the Vulnerable Software and Affected Versions zzcms version 2019 Description An issue exists in the software, allowing SQL Injection in the /admin/dl sendsms.php endpoint via the id parameter. Recommendations For zzcms version 2019, avoid using the id parameter in the /admin/dl sendsms.ph...
PT-2021-10426
Name of the Vulnerable Software and Affected Versions: zz cms version 2019 Description: A SQL injection issue allows attackers to retrieve sensitive data via the dlid parameter in the "/dl/dl sendsms.php" page cookie. Recommendations: For zz cms version 2019, consider restricting access to the...
