CNNVD-202511-1750 Information
Nov 14, 2025
cve
CNNVD ID
CNNVD-202511-1750
Related CVE
- CNNVD Published: 2025-11-14
Description (Chinese)
ZZCMS是中国ZZCMS团队的一套内容管理系统（CMS）。 ZZCMS 2023版本存在SQL注入漏洞，该漏洞源于对文件/admin/wangkan_list.php中参数keyword的错误操作，可能导致SQL注入攻击。
Description (English)
ZZCMS is a content management system (CMS) for the ZZCMS team in China. ZZCMS version 2023 has an injection loophole in SQL, which stems from a mishandling of the parameter keyword in the document/admin/wangkan list.php, which could lead to an SQL injection attack.
Hazard Level
High
Vulnerability Type
SQL注入
Affected Vendor
ZZCMS
Published
2025-11-14
Last Modified
2026-02-24
References
https://github.com/En0t5/vul/blob/main/zzcms/zzcms-sql-inject2.md https://github.com/En0t5/vul/blob/main/zzcms/zzcms-sql-inject2.md#poc https://vuldb.com/?ctiid.332463 https://vuldb.com/?id.332463 https://vuldb.com/?submit.684765 https://access.redhat.com/security/cve/cve-2025-13171
Share on: