Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive data via the dlid parameter in the /dl/dl_sendmail.php page cookie.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ZZCMS SQL注入漏洞
Vulnerability Description
ZZCMS是中国Zzcms团队的一套内容管理系统（CMS）。 zz cms 2019版本存在SQL注入漏洞，该漏洞源于软件对于SQL语句缺乏有效的过滤与转义。该漏洞允许攻击者通过/dl /dl_sendmail.php页面cookie中的dlid参数检索敏感数据。
CVSS Information
N/A
Vulnerability Type
N/A