| Title | zzcms zzcms2025 SQL Injection |
|---|
| Description | The zzcms2025 version has a SQL injection vulnerability in the "grab ad space" module. It does not require an administrator identity; a registered user (user type: company) can perform SQL injection in the "grab ad space" feature.
The vulnerability exists in the "grab ad space" function (`user/adv2.php`). When a user tries to grab an ad space, the `id` parameter sent via a POST request is not properly sanitized, leading to a SQL injection vulnerability. Any user registered as a "company" can exploit this.
To exploit this, a user must first register as a "company" type user, then publish a "supply". After publishing a supply, they can access the "grab ad space" feature where the vulnerability lies. |
|---|
| Source | ⚠️ https://note-hxlab.wetolink.com/share/l5fsaweKD6ke |
|---|
| User | airrudder (UID 25092) |
|---|
| Submission | 12/10/2025 07:31 (11 months ago) |
|---|
| Moderation | 12/17/2025 16:43 (7 days later) |
|---|
| Status | Duplicate |
|---|
| VulDB entry | 276511 [ZZCMS up to 2023 adv2.php id sql injection] |
|---|
| Points | 0 |
|---|