Zero CMS 任意文件上传漏洞和多个SQL注入漏洞

2008-01-11 Zero CMS PoC No

Description

Zero CMS 1.0 Alpha版本中存在多个SQL注入漏洞。远程攻击者借助：(1)到index.php的ID参数,或者(2)到forums/index.php的F或者T参数来执行任意的SQL命令。

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References