8.8
CVSSv3

CVE-2019-12356

Published: 17/06/2022 Updated: 28/06/2022
CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 578
Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

Vulnerability Summary

An issue exists in zzcms 2019. There is a SQL injection Vulnerability in /user/dls_download.php (when the attacker has dls_download authority) via the id parameter.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

zzcms zzcms 2019

Github Repositories

bscdiff compares bsc, issue and CVE numbers in changelogs

bscdiff bscdiff compares bsc, issue, fate (it's a SUSE thing) and CVE numbers from a source changelog, to a target changelog Missing numbers are then printed with their occurrence in the source changelog Usage $ /bscdiff sourcechanges targetchanges 508: bsc#1098394 -> - Fix fileget_diff regression on 20183 (bsc#1098394) 525: bsc#1098394 -> - Fix filem