CVE-2018-18789: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in zzcms 8.3. SQL Injection exists in zt/top.php via a Host HTTP header to zt/news.php...

PT-2018-14653

Name of the Vulnerable Software and Affected Versions zzcms version 8.3 Description An issue exists in zzcms where SQL Injection is possible. This occurs via the Host HTTP header to the /zt/news.php endpoint from zt/top.php. Recommendations For zzcms version 8.3, consider restricting access to th...