CVE-2018-18789: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in zzcms 8.3. SQL Injection exists in zt/top.php via a Host HTTP header to zt/news.php...

Sql injection

zzcms version 8.3 and earlier contains a SQL Injection vulnerability in zt/top.php line 5 that can result in could be attacked by sql injection in zzcms in nginx. This attack appear to be exploitable via running zzcms in nginx...

CVE-2018-1000653: Improper Neutralization of Special Elements used in an SQL Command

zzcms version 8.3 and earlier contains a SQL Injection vulnerability in zt/top.php line 5 that can result in could be attacked by sql injection in zzcms in nginx. This attack appear to be exploitable via running zzcms in nginx...

PT-2018-9506

Name of the Vulnerable Software and Affected Versions zzcms versions 8.3 and earlier Description The issue is related to a SQL Injection vulnerability in the zt/top.php file at line 5. This vulnerability can be exploited when running zzcms in nginx, potentially allowing an attack via SQL injectio...