CVE Catalog
CVE-2025-63694
CriticalSummary
DzzOffice v2.3.7 and before is vulnerable to SQL Injection in explorer/groupmanage.
Risk Assessment
Risk of unauthorized data access and potential database modification by an attacker.
Recommendation
Update to a patched version and use parameterized queries.
Original NVD description (English source)
DzzOffice v2.3.7 and before is vulnerable to SQL Injection in explorer/groupmanage.