There is a SQL injection in the product. (项目中存在sql注入问题)

[l3s10n]

执行一个创建数据库test的sql语句：

[ysicing]

参考 https://github.com/l3s10n/ZenTaoPMS_SqlInjection @sy-records

[sy-records]

Thank you for your feedback. @l3s10n

[sy-records]

Low version users can download patch. https://www.zentao.net/extension-browseRelease-6-front.html