CVE-2018-17415

zzcms V8.3 has a SQL injection in /user/zselite.php via the id parameter...

CVE-2018-18790

An issue was discovered in zzcms 8.3. SQL Injection exists in admin/specialadd.php via a zxbigclassid cookie. This needs an admin user login...