CVE-2019-12352 Information

Description

An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /dl/dl_sendmail.php (when the attacker has dls_print authority) via a dlid cookie.

Reference

https://github.com/cby234/zzcms/issues/5