CVE-2018-13116

Impact

/user/del.php in zzcms 8.3 allows SQL injection via the tablename parameter after leveraging use of the zzcms_ask table.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://github.com/actionyz/ZZCMS/blob/master/SQL/1/del.php.md
• https://github.com/actionyz/ZZCMS/blob/master/SQL/1/del.php.md