Sql injection

WUZHI CMS 4.1.0 has a SQL Injection in api/uc.php via the 'code' parameter, because 'UCKEY' is hard coded...

CVE-2018-11549

An issue was discovered in WUZHI CMS 4.1.0 There is a Stored XSS Vulnerability in "Account Settings - Member Centre - Chinese information - Ordinary member" via a QQ number, as demonstrated by a formqq10= substring...

CVE-2018-11549

An issue was discovered in WUZHI CMS 4.1.0 There is a Stored XSS Vulnerability in "Account Settings - Member Centre - Chinese information - Ordinary member" via a QQ number, as demonstrated by a formqq10= substring...

Sql injection

WUZHI CMS 4.1.0 has SQL Injection via an api/smscheck.php?param= URI...

CVE-2018-11528

WUZHI CMS 4.1.0 has SQL Injection via an api/smscheck.php?param= URI...

CVE-2018-11528

CVE-2018-11528 affects WUZHI CMS 4.1.0 and is a SQL Injection in the API endpoint at api/sms_check.php?param= URI. The root cause is unsafe handling of the param parameter leading to arbitrary SQL execution. Impact described in public records includes the ability to run arbitrary SQL commands on ...

PT-2018-10656 · Wuzhi · Wuzhi Cms

Name of the Vulnerable Software and Affected Versions: WUZHI CMS version 4.1.0 Description: A Stored XSS issue was found in the "Account Settings - Member Centre - Chinese information - Ordinary member" section, specifically via a QQ number. This can be exploited through a form submission, where...

WUZHI CMS 4.1.0 - form[qq_10] Cross-Site Scripting

WUZHI CMS 4.1.0 - formqq10 Cross-Site Scripting Exploit Title: WUZHI CMS 4.1.0 XSS Vulnerability Date: 2018-4-23 Exploit Author: jiguang [email protected] Vendor Homepage: https://github.com/wuzhicms/wuzhicms Software Link: https://github.com/wuzhicms/wuzhicms Version: 4.1.0 CVE: CVE-2018-10313 An...

WUZHI CMS 4.1.0 - 'form[qq_10]' Cross-Site Scripting

Exploit Title: WUZHI CMS 4.1.0 XSS Vulnerability Date: 2018-4-23 Exploit Author: jiguang [email protected] Vendor Homepage: https://github.com/wuzhicms/wuzhicms Software Link: https://github.com/wuzhicms/wuzhicms Version: 4.1.0 CVE: CVE-2018-10313 An issue was discovered in WUZHI CMS 4.1.0...

Wuzhi CMS 4.1.0 Cross Site Scripting

Exploit 1 of 2: Exploit Title: WUZHI CMS 4.1.0 XSS Vulnerability Date: 2018-4-23 Exploit Author: jiguang [email protected] Vendor Homepage: https://github.com/wuzhicms/wuzhicms Software Link: https://github.com/wuzhicms/wuzhicms Version: 4.1.0 CVE: CVE-2018-10313 An issue was discovered in WUZHI CMS...

WUZHI CMS 4.1.0 - form[qq_10] Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: WUZHI CMS 4.1.0 XSS Vulnerability Exploit Author: jiguang email protected Vendor Homepage: https://github.com/wuzhicms/wuzhicms Software Link: https://github.com/wuzhicms/wuzhicms Version: 4.1.0 CVE: CVE-2018-10313 An issue was...

WUZHI CMS Cross-Site Scripting Vulnerability (CNVD-2018-08584)

WUZHI CMS is China's five fingers WUZHI Internet technology company based on PHP and MySQL open source content management system CMS. A cross-site scripting vulnerability exists in the system announcement feature of the extension module in WUZHI CMS version 4.1.0. A remote attacker can exploit th...

PT-2018-9865 · Wuzhi · Wuzhi Cms

Name of the Vulnerable Software and Affected Versions: WUZHI CMS version 4.1.0 Description: An issue was discovered that allows for XSS via the email parameter to the "index.php?m=member&v=register" URI. Recommendations: For WUZHI CMS version 4.1.0, avoid using the email parameter in the...

CVE-2018-10367

An issue was discovered in WUZHI CMS 4.1.0. The content-management feature has Stored XSS via the title or content section...

CVE-2018-10368

An issue was discovered in WUZHI CMS 4.1.0. The "Extension Module - System Announcement" feature has Stored XSS via an announcement...

Design/Logic Flaw

An issue was discovered in WUZHI CMS 4.1.0. The content-management feature has Stored XSS via the title or content section...

CVE-2018-10367

An issue was discovered in WUZHI CMS 4.1.0. The content-management feature has Stored XSS via the title or content section...

Cross site scripting

An issue was discovered in WUZHI CMS 4.1.0. The "Extension Module - System Announcement" feature has Stored XSS via an announcement...

CVE-2018-10367

An issue was discovered in WUZHI CMS 4.1.0. The content-management feature has Stored XSS via the title or content section...

PT-2018-9852 · Wuzhi · Wuzhi Cms

Name of the Vulnerable Software and Affected Versions: WUZHI CMS version 4.1.0 Description: An issue was discovered in the content-management feature, which has Stored XSS via the title or content section. Recommendations: For WUZHI CMS version 4.1.0, update to a newer version that contains a fix...