zzcms v8.3 contains a SQL Injection vulnerability in /user/logincheck.php via an X-Forwarded-For HTTP header.
- https://github.com/seedis/zzcms/blob/master/README.md
No PoCs found on GitHub currently.