Lucene search
China National Vulnerability DatabaseCNVD-2021-99301HistorySep 17, 2021 - 12:00 a.m.
WUZHI CMS SQL Injection Vulnerability (CNVD-2021-99301)
2021-09-1700:00:00
China National Vulnerability Database
www.cnvd.org.cn
8
wuzhi cms
five fingers cms
lnamp
sql injection
vulnerability
content management system
portal
corporate websites
mobile sites
microsoft promotion
keywords parameter
coreframe
order
admin
card.php
attack
EPSS
0.002
Percentile
57.9%
WUZHI CMS (Five Fingers CMS) is a high-performance open source content management system that supports the LNAMP architecture, suitable for portals, corporate websites, mobile sites, microsoft promotion. WUZHI CMS version 4.1.0 has a SQL injection vulnerability. The attacker can use the keywords parameter in /coreframe/app/order/admin/card.php to conduct SQL injection attacks.
Related
cvelist
cvelist
CVE-2021-40670
2021-09-16 18:45:25
osv
osv
CVE-2021-40670
2021-09-16 19:15:07
nvd
nvd
CVE-2021-40670
2021-09-16 19:15:07
prion
prion
Sql injection
2021-09-16 19:15:00
cve
cve
CVE-2021-40670
2021-09-16 19:15:07