CVE-2018-18792: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in zzcms 8.3. SQL Injection exists in zs/zslist.php via a pxzs cookie...