ZZCMS SQL Injection Vulnerability (CNVD-2021-101691)

ZZCMS is a content management system (CMS) from the Zzcms team in China.ZZCMS is vulnerable to SQL injection in 2021, which stems from a lack of validation of external input SQL statements in the askbigclassid parameter of /admin/ask.php in the application. An attacker could use this vulnerability to execute illegal SQL commands to steal sensitive database data.