CVE-2022-36168: Improper Limitation of a Pathname to a Restricted Directory

A directory traversal vulnerability was discovered in Wuzhicms 4.1.0. via /coreframe/app/attachment/admin/index.php:...

CVE-2020-28145: Exposure of Resource to Wrong Sphere

Arbitrary file deletion vulnerability was discovered in wuzhicms v 4.0.1 via coreframe\app\attachment\admin\index.php, which allows attackers to access sensitive information...