A SQL Injection vulnerability exists in ZZCMS 2021 via the askbigclassid parameter in /admin/ask.php.
No PoCs from references.
- https://github.com/superlink996/chunqiuyunjingbachang