References https://github.com/adysec/POC/blob/main/wpoc/zzcms/zzcms%E7%B3%BB%E7%BB%9F%E6%8E%A5%E5%8F%A3index.php%E5%AD%98%E5%9C%A8SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md https://developer.cloud.tencent.com/article/1042999 https://stack.chaitin.com/vuldb/detail/18c85b35-8636-4b43-81d8-d6d30c46e0d8 https://www.cnblogs.com/huweishen/p/18555054 https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/zzcms/zzcms%E7%B3%BB%E7%BB%9F%E6%8E%A5%E5%8F%A3ad_list.php%E5%AD%98%E5%9C%A8SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md https://www1.szu.edu.cn/nc/view.asp?id=552 https://avd.aliyun.com/detail?id=AVD-2024-52724 https://www.cnvd.org.cn/flaw/show/CNVD-2021-102062 https://blog.csdn.net/qq_69432323/article/details/131890328 https://pino-hd.github.io/2018/06/10/ZZCMSV8-2SQL%E6%B3%A8%E5%85%A5/ https://www.sohu.com/a/245148678_354899 https://www.wlaqsys.com/archives/category/cve/php%E6%BC%8F%E6%B4%9E/zzcms%E6%BC%8F%E6%B4%9E https://blog.csdn.net/chiza2596/article/details/130273534 https://zone.ci/aliyun/ali_nvd/77656.html https://www.anquanke.com/post/id/156660 https://avd.aliyun.com/detail?id=AVD-2025-0565 https://cve.imfht.com/detail/CVE-2025-0565 https://www.cnvd.org.cn/flaw/show/CNVD-2024-43213 https://www.ddpoc.com/DVB-2025-8736.html
Related VulnerabilitiesPoCCVE-2019-10647: ZZZCMS ZZZPHP 1.6.3 – Remote PHP Code Execution (RCE)zcms-v3-sqli: zcms v3 sqlizzcms-zsmanage-sqli: ZzCMS zsmanage sqliZZZCMS /search/ 代码执行漏洞(CVE-2019-9041)PoCCVE-2019-9041: ZZZCMS 1.6.1 - Remote Code ExecutionPoCCVE-2020-20285: ZZcms - Cross-Site ScriptingPoCCVE-2022-23881: ZZZCMS zzzphp 2.1.0 - Remote Code ExecutionPoCCVE-2022-40443: ZZCMS 2022 - Path Information DisclosurePoCzzzcms-parser-search-rce: ZZZCMS parserSearch 远程命令执行漏洞PoCzcms-v3-sqli: ZCMS - SQL InjectionPoCzzcms-register-xss: Zzcms `register_nodb.php` - Cross Site ScriptingPoCzzcms-xss: ZZCMS - Cross-Site Scripting