漏洞描述
【漏洞对象】ZZcms开源招商网 【涉及版本】ZZcms CMS 8.3 【漏洞描述】ZZcms开源招商网CMS系统8.3版本dl_download页面存在前台sql注入，可能造成数据泄露，甚至服务器被入侵。
ZZcms开源招商网CMS 8.3 dl_download页面前台-SQL注入
PoC代码
暂无相关漏洞推荐
- zcms-v3-sqli: zcms v3 sqli
- zzcms-zsmanage-sqli: ZzCMS zsmanage sqli
- ZZZCMS /search/ 代码执行漏洞（CVE-2019-9041）
- POC CVE-2019-9041: ZZZCMS 1.6.1 - Remote Code Execution
- POC CVE-2020-20285: ZZcms - Cross-Site Scripting
- POC CVE-2022-23881: ZZZCMS zzzphp 2.1.0 - Remote Code Execution
- POC CVE-2022-40443: ZZCMS 2022 - Path Information Disclosure
- POC zzzcms-parser-search-rce: ZZZCMS parserSearch 远程命令执行漏洞
- POC zcms-v3-sqli: ZCMS - SQL Injection
- POC zzcms-register-xss: Zzcms `register_nodb.php` - Cross Site Scripting
- POC zzcms-xss: ZZCMS - Cross-Site Scripting
- POC zzzcms-ssrf: ZzzCMS 1.75 - Server-Side Request Forgery
- POC zzzcms-xss: Zzzcms 1.75 - Cross-Site Scripting