5 matches found
Sql injection
Wuzhicms v4.1.0 was discovered to contain a SQL injection vulnerability via the $keywords parameter at /core/admin/copyfrom.php...
7.5CVSS8.6AI score0.0064EPSS
SaveExploits1References2Affected Software1
CVE-2023-52064: Improper Neutralization of Special Elements used in an SQL Command
Wuzhicms v4.1.0 was discovered to contain a SQL injection vulnerability via the $keywords parameter at /core/admin/copyfrom.php...
9.8CVSS8.2AI score0.0064EPSS
SaveExploits1References3
PT-2024-14380
Name of the Vulnerable Software and Affected Versions Wuzhicms version 4.1.0 Description A SQL injection issue was discovered via the keywords parameter at the "/core/admin/copyfrom.php" API endpoint. This allows for potential exploitation. Recommendations For Wuzhicms version 4.1.0, consider...
9.8CVSS5.7AI score0.0064EPSS
SaveExploits1References6
20