CVEs-PoC/2018/CVE-2018-9309.md

CVE-2018-9309

Description

An issue was discovered in zzcms 8.2. It allows SQL injection via the id parameter in a dl/dl_sendsms.php request.

POC

Reference

• https://github.com/lihonghuyang/vulnerability/blob/master/dl_sendsms.php.md
• https://github.com/lihonghuyang/vulnerability/blob/master/dl_sendsms.php.md

Github

• https://github.com/superlink996/chunqiuyunjingbachang