zzcms SQL Injection Vulnerability (CNVD-2018-26018)

ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A SQL injection vulnerability exists in the zs/search.php file in ZZCMS version 8.3. A remote attacker can exploit this vulnerability to obtain the current database name of mysql with the help of pxzs cookie...