An issue was discovered in zzcms 2019. SQL Injection exists in /admin/dl_sendsms.php via the id parameter.
References
Link | Resource |
---|---|
https://github.com/cby234/zzcms/issues/2 | Exploit Issue Tracking Third Party Advisory |
Configurations
History
09 Jun 2022, 15:59
Type | Values Removed | Values Added |
---|---|---|
First Time |
Zzcms
Zzcms zzcms |
|
CPE | cpe:2.3:a:zzcms:zzcms:2019:*:*:*:*:*:*:* | |
CVSS |
v2 : v3 : |
v2 : 7.5
v3 : 9.8 |
References | (MISC) https://github.com/cby234/zzcms/issues/2 - Exploit, Issue Tracking, Third Party Advisory | |
CWE | CWE-89 |
02 Jun 2022, 14:53
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2022-06-02 14:15
Updated : 2023-12-10 14:22
NVD link : CVE-2019-12349
Mitre link : CVE-2019-12349
CVE.ORG link : CVE-2019-12349
JSON object : View
Products Affected
zzcms
- zzcms
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')