Auditing ZZCMS v8.1
I. Reinstallation vulnerability. Like other CMS products, this application uses a lock file to determine whether it has been installed. Because the check occurs only in step 1, an attacker can POST directly to steps 2 and 3 and reinstall it. Analysis of Install/Index.php: $submit = isset($POST['s…