CVE-2021-42945

CVE-2021-42945 is a confirmed SQL Injection in ZZCMS 2021, exploitable via the askbigclassid parameter in /admin/ask.php. The vulnerability stems from lack of input validation on external SQL statements, allowing an attacker to execute arbitrary SQL commands and potentially exfiltrate sensitive d...