PT-2018-13274

Name of the Vulnerable Software and Affected Versions WUZHI CMS version 4.1.0 Description A SQL injection issue was found in the /coreframe/app/admin/pay/admin/index.php file of WUZHI CMS. The issue is related to the keyValue parameter in the "index.php?m=pay&f=index&v=listing" API endpoint...

CVE-2018-15894: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection was discovered in /coreframe/app/admin/pay/admin/index.php in WUZHI CMS 4.1.0 via the index.php?m=pay&f=index&v=listing keyValue parameter...