CVE-2018-14961

dl/dl_sendmail.php in zzcms 8.3 has SQL Injection via the sql parameter.

• CWE-89

• https://blog.csdn.net/weixin_42813492/article/details/81240523Exploit, Third Party Advisory
• https://github.com/AvaterXXX/ZZCMS/blob/master/README.mdExploit, Third Party Advisory
• https://blog.csdn.net/weixin_42813492/article/details/81240523Exploit, Third Party Advisory
• https://github.com/AvaterXXX/ZZCMS/blob/master/README.mdExploit, Third Party Advisory

Published

Aug 6, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-14956CMS ISWEB 3.5.3 is vulnerable to multiple SQL injection flaw…
• CVE-2018-14957CMS ISWEB 3.5.3 is vulnerable to directory traversal and loc…
• CVE-2018-14958An issue was discovered in WeaselCMS v0.3.5. CSRF can update…
• CVE-2018-14959An issue was discovered in WeaselCMS v0.3.5. CSRF can create…
• CVE-2018-1496IBM Content Navigator 2.0.3, 3.0.0, 3.0.1, 3.0.2, and 3.0.3 …5.4
• CVE-2018-14960Xiao5uCompany 1.7 has CSRF via admin/Admin.asp.
• CVE-2018-14962zzcms 8.3 has stored XSS related to the content variable in …
• CVE-2018-14963zzcms 8.3 has CSRF via the admin/adminadd.php?action=add URI…
• CVE-2018-14964An issue was discovered in EMLsoft 5.4.5. XSS exists via the…
• CVE-2018-14965An issue was discovered in EMLsoft 5.4.5. The eml/upload/eml…
• CVE-2018-14966An issue was discovered in EMLsoft 5.4.5. The eml/upload/eml…
• CVE-2018-14967An issue was discovered in EMLsoft 5.4.5. upload\eml\action\…