ZZCMS SQL Injection Vulnerability (CNVD-2021-103656)

ZZCMS is a content management system (CMS) from the Zzcms team in China.ZZCMS version 2019 is vulnerable to a SQL injection vulnerability that originates from a missing validation of external input SQL statements in the dlid parameter on the application’s /dl/dl_print.php page. An attacker could use this vulnerability to execute illegal SQL commands to steal sensitive database data.