ZZCMS SQL注入漏洞

ZZCMS is a content management system CMS by the ZZCMS team in China. A SQL injection vulnerability exists in ZZCMS version 2023, which originates from the lack of validation of the parameter phome in file 3/Ebak5.1/upload/phome.php for external SQL statements, which can be exploited by an attacke...