Sql injection

SQL injection vulnerability in ZCMS 1.1...

CVE-2015-7346

SQL injection vulnerability in ZCMS 1.1...

CVE-2015-7346

SQL injection vulnerability in ZCMS 1.1...

CVE-2015-7346

CVE-2015-7346 affects ZCMS 1.1 (Zeyuan Web Content Management System). The connected documents confirm a SQL injection vulnerability in ZCMS 1.1 that can bypass authentication to reach the admin area, caused by constructing queries via string concatenation (e.g., vulnerable login query). Public e...