ZZCMS uckey suffers from SQL injection vulnerability

ZZCMS is an enterprise website builder. A SQL injection vulnerability exists in ZZCMS uckey. The vulnerability stems from the failure of UCKEY to randomize, updatepw, synlogin, gettag, renameuser, deleteuser functions are not filtered, an attacker can use this vulnerability to obtain sensitive...