CVE-2021-41654

SQL injection vulnerabilities exist in Wuzhicms v4.1.0 which allows attackers to execute arbitrary SQL commands via the $keyValue parameter in /coreframe/app/pay/admin/index.php...

Sql injection

SQL injection vulnerabilities exist in Wuzhicms v4.1.0 which allows attackers to execute arbitrary SQL commands via the $keyValue parameter in /coreframe/app/pay/admin/index.php...

CVE-2021-41654

SQL injection vulnerabilities exist in Wuzhicms v4.1.0 which allows attackers to execute arbitrary SQL commands via the $keyValue parameter in /coreframe/app/pay/admin/index.php...

PT-2022-11453

Name of the Vulnerable Software and Affected Versions Wuzhicms version 4.1.0 Description The issue allows attackers to execute arbitrary SQL commands via the keyValue parameter in the "/coreframe/app/pay/admin/index.php" API endpoint. This enables attackers to manipulate database queries,...

CVE-2021-41654: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerabilities exist in Wuzhicms v4.1.0 which allows attackers to execute arbitrary SQL commands via the $keyValue parameter in /coreframe/app/pay/admin/index.php...

LibreOffice Cryptographic Signature Verification

The vulnerability of the LibreOffice office software package is related to incorrect verification of the cryptographic signature when using the “X509Data” and “KeyValue” values. Exploiting this vulnerability can allow an attacker to circumvent security restrictions by using a specially created OD...

Input validation

LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to...

CVE-2021-25636

LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to...

org.alluxio:alluxio-core-client (1.1.0), org.alluxio:alluxio-examples (1.1.0) +10 more potentially affected by CVE-2022-23848 via org.alluxio:alluxio-core-common (1.1.0)

org.alluxio:alluxio-core-common MAVEN version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.alluxio:alluxio-core-common and may be impacted: - org.alluxio:alluxio-core-client 1.1.0 - org.alluxio:alluxio-examples 1.1.0 -...

org.alluxio:alluxio-core-client (1.1.1), org.alluxio:alluxio-examples (1.1.1) +10 more potentially affected by CVE-2022-23848 via org.alluxio:alluxio-core-common (1.1.1)

org.alluxio:alluxio-core-common MAVEN version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.alluxio:alluxio-core-common and may be impacted: - org.alluxio:alluxio-core-client 1.1.1 - org.alluxio:alluxio-examples 1.1.1 -...

org.alluxio:alluxio-core-client (1.2.0), org.alluxio:alluxio-examples (1.2.0) +11 more potentially affected by CVE-2022-23848 via org.alluxio:alluxio-core-common (1.2.0)

org.alluxio:alluxio-core-common MAVEN version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.alluxio:alluxio-core-common and may be impacted: - org.alluxio:alluxio-core-client 1.2.0 - org.alluxio:alluxio-examples 1.2.0 -...

org.alluxio:alluxio-core-client (1.3.0), org.alluxio:alluxio-examples (1.3.0) +11 more potentially affected by CVE-2022-23848 via org.alluxio:alluxio-core-common (1.3.0)

org.alluxio:alluxio-core-common MAVEN version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.alluxio:alluxio-core-common and may be impacted: - org.alluxio:alluxio-core-client 1.3.0 - org.alluxio:alluxio-examples 1.3.0 -...

CVE-2021-40674

An SQL injection vulnerability exists in Wuzhi CMS v4.1.0 via the KeyValue parameter in coreframe/app/order/admin/index.php...

CVE-2021-40674

An SQL injection vulnerability exists in Wuzhi CMS v4.1.0 via the KeyValue parameter in coreframe/app/order/admin/index.php...

Sql injection

An SQL injection vulnerability exists in Wuzhi CMS v4.1.0 via the KeyValue parameter in coreframe/app/order/admin/index.php...

CVE-2021-40674

An SQL injection vulnerability exists in Wuzhi CMS v4.1.0 via the KeyValue parameter in coreframe/app/order/admin/index.php...

CVE-2021-40674

An SQL injection vulnerability exists in Wuzhi CMS v4.1.0 via the KeyValue parameter in coreframe/app/order/admin/index.php...

CVE-2021-40674: Improper Neutralization of Special Elements used in an SQL Command

An SQL injection vulnerability exists in Wuzhi CMS v4.1.0 via the KeyValue parameter in coreframe/app/order/admin/index.php...

PT-2021-22941

Name of the Vulnerable Software and Affected Versions Wuzhi CMS version 4.1.0 Description An SQL injection issue exists via the KeyValue parameter in coreframe/app/order/admin/index.php. Recommendations For Wuzhi CMS version 4.1.0, consider restricting access to the KeyValue parameter in the...

CVE-2018-15894

A SQL injection was discovered in /coreframe/app/admin/pay/admin/index.php in WUZHI CMS 4.1.0 via the index.php?m=pay&f=index&v=listing keyValue parameter...