CVE-2018-18785: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in zzcms 8.3. SQL Injection exists in zs/subzs.php with a zzcmscpid cookie to zs/search.php...

SQL Injection Vulnerability in ZZCMS 'subzs.php'

ZZCMS is an enterprise website builder. A SQL injection vulnerability exists in ZZCMS 'subzs.php'. It allows attackers to exploit the vulnerability to obtain sensitive information about the database...