CVE-2018-18785

An issue was discovered in zzcms 8.3. SQL Injection exists in zs/subzs.php with a zzcmscpid cookie to zs/search.php...

CVE-2018-18785: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in zzcms 8.3. SQL Injection exists in zs/subzs.php with a zzcmscpid cookie to zs/search.php...

PT-2018-14649

Name of the Vulnerable Software and Affected Versions zzcms version 8.3 Description An issue exists in zzcms where SQL Injection is possible. This occurs in the zs/subzs.php file when a zzcmscpid cookie is used to access the zs/search.php endpoint. Recommendations For zzcms version 8.3, consider...

PT-2018-14655

Name of the Vulnerable Software and Affected Versions zzcms version 8.3 Description An issue exists in zzcms where SQL Injection is possible. This occurs in the zs/search.php file through the pxzs cookie. Recommendations For zzcms version 8.3, consider restricting access to the zs/search.php file...

CVE-2018-18791: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in zzcms 8.3. SQL Injection exists in zs/search.php via a pxzs cookie...