ALPINE-CVE-2022-40674

libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c...

UBUNTU-CVE-2022-40674

libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c...

CVE-2022-40674

libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c...

CVE-2022-40674

CVE-2022-40674 affects libexpat (expat) prior to 2.4.9, with a use-after-free in the doContent function of xmlparse.c. The connected advisories confirm this weakness can lead to denial of service or potentially arbitrary code execution via memory corruption, depending on how the parser handles in...

CVE-2022-40674

libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c...

CVE-2022-40674

libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c...

Wuzhi CMS SQL Injection (CVE-2021-40674)

An SQL injection vulnerability exists in Wuzhi CMS. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2021-40674

creationtimestamp| type| source ---|---|--- 2021-09-20 18:27:12+00:00| seen| https://t.me/cibsecurity/29109...

CVE-2021-40674

Wuzhi CMS v4.1.0 contains an SQL injection in coreframe/app/order/admin/index.php via the KeyValue parameter. The root cause is improper handling of that parameter, enabling remote attackers to execute arbitrary SQL commands with no authentication. CVSS details map to high/critical impact (C to H...