167 matches found
CVE-2025-13782: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was identified in taosir WTCMS up to 01a5f68a3dfc2fdddb44eed967bb2d4f60487665. Affected by this issue is the function delete of the file application/Admin/Controller/SlideController.class.php of the component SlideController. The manipulation of the argument ids leads to sql...
wtcms SQL注入漏洞
wtcms is a ThinkPHP-based content management system CMS by Taosir Individual Developer. An SQL injection vulnerability exists in wtcms, which stems from incorrect manipulation of the parameter ids in the file application/Comment/Controller/CommentadminController.class.php, which could lead to SQL...
wtcms 代码注入漏洞
wtcms is a ThinkPHP-based content management system CMS by Taosir Individual Developer. A code injection vulnerability exists in wtcms, which stems from incorrect manipulation of the parameter content in the file /index.php, which could lead to code injection...
wtcms SQL注入漏洞
wtcms is a ThinkPHP-based content management system CMS by Taosir Individual Developer. An SQL injection vulnerability exists in wtcms, which stems from incorrect manipulation of the parameter ids in the file application/Admin/Controller/SlideController.class.php, which could lead to SQL injectio...
EUVD-2019-18297
Malware in sbrugna...
EUVD-2018-2341
Malware in sbrugna...
EUVD-2019-18296
Malware in sbrugna...
EUVD-2020-13136
Malware in sbrugna...
EUVD-2020-13131
Malware in sbrugna...
EUVD-2019-18298
Malware in sbrugna...
EUVD-2019-7268
Malware in sbrugna...
EUVD-2019-18299
Malware in sbrugna...
EUVD-2020-13132
Malware in sbrugna...
EUVD-2020-13135
Malware in sbrugna...
EUVD-2020-13134
Malware in sbrugna...
EUVD-2020-13130
Malware in sbrugna...
CVE-2024-48238
WTCMS 1.0 is vulnerable to SQL Injection in the editpost method of /Admin\Controller\NavControl.class.php via the parentid parameter...
CVE-2024-48239
An issue was discovered in WTCMS 1.0. In the plupload method in \AssetController.class.php, the app parameters aren't processed, resulting in Cross Site Scripting XSS...