CVE-2018-13116

Summary

/user/del.php in zzcms 8.3 allows SQL injection via the tablename parameter after leveraging use of the zzcms_ask table.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://github.com/actionyz/ZZCMS/blob/master/SQL/1/del.php.md

References

• https://github.com/actionyz/ZZCMS/blob/master/SQL/1/del.php.md

• ←Previous
• Next→