13451 matches found
CVE-2020-20124
Wuzhi CMS v4.1.0 contains a remote code execution RCE vulnerability in \attachment\admin\index.php...
CVE-2020-20124
Wuzhi CMS v4.1.0 contains a remote code execution RCE vulnerability in \attachment\admin\index.php...
CVE-2020-20124
Wuzhi CMS v4.1.0 contains a remote code execution RCE vulnerability in \attachment\admin\index.php...
CVE-2020-20124: Improper Control of Generation of Code
Wuzhi CMS v4.1.0 contains a remote code execution RCE vulnerability in \attachment\admin\index.php...
WUZHI CMS Cross-Site Scripting Vulnerability (CNVD-2023-17601)
WUZHI CMS is a PHP and MySQL based Content Management System CMS from Beijing WuZHI Technology Co. The vulnerability can be exploited by remote attackers to perform cross-site scripting attacks via the "email username" parameter in "index.php"...
CVE-2020-19915
Cross Site Scripting XSS vulnerability exists in WUZHI CMS 4.1.0 via the mailbox username in index.php...
CVE-2020-19915
Cross Site Scripting XSS vulnerability exists in WUZHI CMS 4.1.0 via the mailbox username in index.php...
Cross site scripting
Cross Site Scripting XSS vulnerability exists in WUZHI CMS 4.1.0 via the mailbox username in index.php...
CVE-2020-19915
The CVE-2020-19915 is a Cross-Site Scripting (XSS) vulnerability in WUZHI CMS 4.1.0, exploitable via the mailbox/email username parameter in index.php. Multiple connected sources corroborate the affected product/version and the input vector, describing remote XSS through that parameter. The docum...
CVE-2020-19915
Cross Site Scripting XSS vulnerability exists in WUZHI CMS 4.1.0 via the mailbox username in index.php...
CVE-2021-40674
An SQL injection vulnerability exists in Wuzhi CMS v4.1.0 via the KeyValue parameter in coreframe/app/order/admin/index.php...
CVE-2020-19915: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability exists in WUZHI CMS 4.1.0 via the mailbox username in index.php...
PT-2021-10418
Name of the Vulnerable Software and Affected Versions: WUZHI CMS version 4.1.0 Description: A Cross Site Scripting XSS issue exists in the software, specifically via the mailbox username in the "index.php" endpoint. This allows for potential malicious script execution. Recommendations: For WUZHI...
Wuzhi WUZHI CMS 跨站脚本漏洞
WUZHI CMS is a PHP and MySQL based Content Management System CMS from Beijing WuZHI Technology Co. The vulnerability can be exploited by remote attackers to perform cross-site scripting attacks via the "email username" parameter in "index.php"...
CVE-2021-40674: Improper Neutralization of Special Elements used in an SQL Command
An SQL injection vulnerability exists in Wuzhi CMS v4.1.0 via the KeyValue parameter in coreframe/app/order/admin/index.php...
PT-2021-22941
Name of the Vulnerable Software and Affected Versions Wuzhi CMS version 4.1.0 Description An SQL injection issue exists via the KeyValue parameter in coreframe/app/order/admin/index.php. Recommendations For Wuzhi CMS version 4.1.0, consider restricting access to the KeyValue parameter in the...
WUZHI CMS SQL Injection Vulnerability (CNVD-2021-99300)
WUZHI CMS Five Fingers CMS is a high-performance open source content management system that supports LNAMP architecture, suitable for portals, enterprise websites, mobile sites, microsoft promotion. Attackers can use the keywords parameter in coreframe/app/promote/admin/index.php vulnerability fo...
Chikitsa Patient Management System Component Compromise Data Compromise
The vulnerability of the index.php/admin/adduser component of the Chikitsa Patient Management System exists due to the lack of protective measures for the website structure. Exploiting this vulnerability allows an attacker, operating remotely, to compromise the confidentiality and integrity of th...