CVE-2025-22976 Information

Description

SQL Injection vulnerability in dingfanzuCMS v.1.0 allows a local attacker to execute arbitrary code via not filtering the content correctly at the ## Reference https://github.com/xiaosguang/cve/blob/main/dingfanzu/dingfanzu-CMS%20checkOrder.php%20shopId%20SQL-inject.md

Related CNNVD

CNNVD-202507-3527 (Published: 2025-07-28)