Skip to content

CVE-2019-12349 An issue was discovered in zzcms 2019. SQL Injection exists in /admin/dl_sendsms.php via the id parameter.

CriticalCVSS 9.8 EPSS 1.4%
Published
Updated
Exploit status
No public exploit known

Description

An issue was discovered in zzcms 2019. SQL Injection exists in /admin/dl_sendsms.php via the id parameter.

Affected products

ProductAffected versionsFixed in
zzcms = 2019 No fix listed

References

  • github.com exploit issue-tracking third-party-advisory