Sql injection

zzcms 8.3 contains a SQL Injection vulnerability in /user/check.php via a Client-Ip HTTP header...

PT-2018-13916

Name of the Vulnerable Software and Affected Versions zzcms version 8.3 Description The issue is related to a SQL Injection vulnerability. This vulnerability can be exploited via the Client-Ip HTTP header in the /user/check.php API endpoint. Recommendations For zzcms version 8.3, consider...

CVE-2018-17136: Improper Neutralization of Special Elements used in an SQL Command

zzcms 8.3 contains a SQL Injection vulnerability in /user/check.php via a Client-Ip HTTP header...