CVE-2019-12358: Zzcms

High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days.

An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /dl/dl_sendsms.php (when the attacker has dls_print authority) via a dlid cookie.

Affected products

• Zzcms Zzcms: version 2019 only

Published 2022-06-17. Last modified 2026-06-17.