wtcms 代码注入漏洞

wtcms is a ThinkPHP-based content management system CMS by Taosir Individual Developer. A code injection vulnerability exists in wtcms, which stems from incorrect manipulation of the parameter content in the file /index.php, which could lead to code injection...

EUVD-2019-18297

Malware in sbrugna...

EUVD-2019-7268

Malware in sbrugna...

EUVD-2018-2341

Malware in sbrugna...

EUVD-2019-18299

Malware in sbrugna...

EUVD-2020-13134

Malware in sbrugna...

EUVD-2019-18296

Malware in sbrugna...

EUVD-2020-13136

Malware in sbrugna...

EUVD-2019-18298

Malware in sbrugna...

EUVD-2020-13135

Malware in sbrugna...

EUVD-2020-13132

Malware in sbrugna...

EUVD-2020-13130

Malware in sbrugna...

EUVD-2020-13131

Malware in sbrugna...

CVE-2024-48238

WTCMS 1.0 is vulnerable to SQL Injection in the editpost method of /Admin\Controller\NavControl.class.php via the parentid parameter...

CVE-2024-48239

An issue was discovered in WTCMS 1.0. In the plupload method in \AssetController.class.php, the app parameters aren't processed, resulting in Cross Site Scripting XSS...

CVE-2024-48237

WTCMS 1.0 is vulnerable to Incorrect Access Control in \Common\Controller\HomebaseController.class.php...

CVE-2020-20348

WTCMS 1.0 contains a stored cross-site scripting XSS vulnerability in the link field under the background menu management module...

CVE-2020-20343

WTCMS 1.0 contains a cross-site request forgery CSRF vulnerability in the index.php?g=admin=nav=addpost component that allows attackers to arbitrarily add articles in the administrator background...

CVE-2020-20344

WTCMS 1.0 contains a reflective cross-site scripting XSS vulnerability in the keyword search function under the background articles module...

CVE-2020-20349

WTCMS 1.0 contains a stored cross-site scripting XSS vulnerability in the link address field under the background links module...