A SQL injection vulnerability exists in zzcms v8.3 via the /admin/adclass.php bigclassid parameter.
zzcms zzcms 8.3