high8.8
CVE-2019-12356
An issue was discovered in zzcms 2019.
Impact
An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /user/dls_download.php (when the attacker has dls_download authority) via the id parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zzcms | Zzcms | Version 2019 |