94 matches found
VulnCheck KEV: CVE-2025-34045
A path traversal vulnerability exists in WeiPHP 5.0, an open source WeChat public account platform development framework by Shenzhen Yuanmengyun Technology Co., Ltd. The flaw occurs in the picUrl parameter of the /public/index.php/material/Material/downloadimgage endpoint, where insufficient inpu...
PT-2025-26994
Name of the Vulnerable Software and Affected Versions: WeiPHP version 5.0 Description: A path traversal issue exists in the /public/index.php/material/Material/ download imgage endpoint, specifically in the picUrl parameter, where insufficient input validation allows unauthenticated remote...
VulnCheck KEV: CVE-2020-20300
SQL injection vulnerability in the wpwhere function in WeiPHP 5.0...
CVE-2020-20300
SQL injection vulnerability in the wpwhere function in WeiPHP 5.0...
CVE-2020-20299
WeiPHP 5.0 does not properly restrict access to pages, related to using POST...
SQL Injection Vulnerability in weiphp 4.0
WeiPHP is an open source microsoft public platform development framework. Weiphp 4.0 has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...
Command Execution Vulnerability in WeiPHP
WeiPHP is a microsoft development platform, which is based on oneThink, a content management framework. WeiPHP has a command execution vulnerability that can be exploited by attackers to gain control of the server...
Command Execution Vulnerability in Weiphp Backend
WeiPHP is an open source WeChat public platform development framework to build a personal WeChat public account operation platform. A command execution vulnerability exists in the Weiphp backend. Attackers can use the vulnerability to obtain server privileges...
SQL injection vulnerability in WeiPHP lo***.php page of Shenzhen Yuanmeng Cloud Technology Co.
WeiPHP is a microsoft development platform, which is based on oneThink, a content management framework. Ltd. WeiPHP lo.php page has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...
Weiphp information leakage vulnerability
Weiphp is a WeChat development platform that supports the development of public numbers and small programs by China's Shenzhen Yuanmeng Yun Weiphp company. An information disclosure vulnerability exists in WeiPHP 5.0, which stems from a failure to properly restrict access to pages associated with...
Shenzhen Yuanmeng Cloud Technology Co., Ltd. WeiPHP 5.0 suffers from a logic flaw vulnerability
weiphp is a microsoft development platform which is based on oneThink, a content management framework. Shenzhen Yuanmeng Cloud Technology Co. Ltd WeiPHP 5.0 has a logic flaw vulnerability that can be exploited by attackers to obtain sensitive information...
WeiPHP SQL Injection Vulnerability
weiphp is an open source, efficient and simple microsoft development platform. A SQL injection vulnerability exists in the wpwhere function in WeiPHP 5.0. No detailed vulnerability details are provided at this time...
CVE-2020-20299
WeiPHP 5.0 does not properly restrict access to pages, related to using POST...
CVE-2020-20300
SQL injection vulnerability in the wpwhere function in WeiPHP 5.0...
CVE-2020-20299
WeiPHP 5.0 does not properly restrict access to pages, related to using POST...
CVE-2020-20300
SQL injection vulnerability in the wpwhere function in WeiPHP 5.0...
Sql injection
SQL injection vulnerability in the wpwhere function in WeiPHP 5.0...
Design/Logic Flaw
WeiPHP 5.0 does not properly restrict access to pages, related to using POST...
CVE-2020-20300
WeiPHP 5.0 is affected by a SQL injection vulnerability in the wp_where function. The Nuclei template details exploitability, stating that an attacker could potentially obtain sensitive data, modify data, and perform unauthorized administrative operations within the affected site context. CVE-202...
