CVE-2019-12352

An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /dl/dl_sendmail.php (when the attacker has dls_print authority) via a dlid cookie.

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2022-06-17

Last modified

2024-08-04

Weaknesses

CWE-89

Affected products

• Zzcms (Zzcms)

References

• https://github.com/cby234/zzcms/issues/5