CVE-2021-42945

A SQL Injection vulnerability exists in ZZCMS 2021 via the askbigclassid parameter in /admin/ask.php.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2021-12-15

Last modified

2024-08-04

Weaknesses

CWE-89

Affected products

• Zzcms (Zzcms)

References

• http://www.zzcms.net/
• https://github.com/Boomingjacob/ZZCMS/blob/main/4.jpg