EUVD-2018-10502

Malware in sbrugna...

Sql injection

An issue was discovered in zzcms 8.3. SQL Injection exists in ajax/zs.php via a pxzs cookie...

CVE-2018-18786

CVE-2018-18786 affects ZZCMS 8.3 with a SQL injection in ajax/zs.php exploitable via a pxzs cookie. Root cause: insufficient input validation leading to injection. Impact noted as high/critical across confidentiality, integrity, and availability; CNVD reports attacker can obtain the current MySQL...