← All advisories

Critical severity9.8NVD Advisory· Published Aug 6, 2018· Updated Jun 17, 2026

CVE-2018-14961

CVE-2018-14961

Description

dl/dl_sendmail.php in zzcms 8.3 has SQL Injection via the sql parameter.

Affected products

3

Zzcms/Zzcmsinferred3 versions
= 8.3+ 2 more
- (no CPE)range: = 8.3
- cpe:2.3:a:zzcms:zzcms:8.3:*:*:*:*:*:*:*
- (no CPE)range: =8.3

Patches

Vulnerability mechanics

References

2

blog.csdn.net/weixin_42813492/article/details/81240523nvdExploitThird Party Advisory
github.com/AvaterXXX/ZZCMS/blob/master/README.mdnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.