critical9.8
CVE-2019-12348
An issue was discovered in zzcms 2019.
Impact
An issue was discovered in zzcms 2019. SQL Injection exists in user/ztconfig.php via the daohang or img POST parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zzcms | Zzcms | Version 2019 |