Description DzzOffice v2.3.7 and before is vulnerable to SQL Injection in explorer/groupmanage. References https://github.com/zyx0814/dzzoffice/issues/364 https://github.com/Yohane-Mashiro/dzzoffice_sql