CVE-2019-12351

Name of the Vulnerable Software and Affected Versions zzcms version 2019

Description An issue exists in the software where SQL Injection is possible. This occurs in the dl/dl print.php file through an id parameter value that has a trailing comma.

Recommendations For zzcms version 2019, avoid using the id parameter with a trailing comma in the dl/dl print.php file until a fix is available. As a temporary workaround, consider restricting access to the dl/dl print.php file to minimize the risk of exploitation.