CVE-2020-20299

WeiPHP 5.0 does not properly restrict access to pages, related to using POST...

CVE-2020-20299

Summary: CVE-2020-20299 affects WeiPHP 5.0. The vulnerability arises from a failure to properly restrict access to pages, related to the use of POST. Documented impact ranges from partial confidentiality loss (CVSS v2) to high confidentiality impact (CVSS v3.1) with network access and low attack ...

PT-2020-15255

Name of the Vulnerable Software and Affected Versions WeiPHP version 5.0 Description The issue is related to improper access restriction to pages in WeiPHP, specifically when using the POST method. Recommendations For WeiPHP version 5.0, consider restricting access to sensitive pages to minimize...

CVE-2020-20299: Undefined Security Weakness

WeiPHP 5.0 does not properly restrict access to pages, related to using POST...

Weiphp 信息泄露漏洞

Weiphp is a WeChat development platform that supports the development of public numbers and small programs by China's Shenzhen Yuanmeng Yun Weiphp company. An information disclosure vulnerability exists in WeiPHP 5.0, which stems from a failure to properly restrict access to pages associated with...

PT-2020-15257

Name of the Vulnerable Software and Affected Versions WeiPHP version 5.0 Description The issue is related to a SQL injection vulnerability in the wp where function. This vulnerability may allow attackers to inject malicious SQL code, potentially leading to unauthorized access or modification of...

CVE-2020-20300: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the wpwhere function in WeiPHP 5.0...

Shenzhen Yuanmeng Cloud Technology Co., Ltd. WeiPHP has file reading vulnerability

WeiPHP is an open source microsoft public platform development framework. Shenzhen Yuanmeng Yun Technology Co., Ltd WeiPHP has a file reading vulnerability, which can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in WeiPHP of Shenzhen Yuanmeng Cloud Technology Co.

WeiPHP is an open source microsoft public platform development framework. Shenzhen Yuanmeng Yun Technology Co. WeiPHP has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

File inclusion vulnerability in WeiPHP ap***.php file of Shenzhen Yuanmeng Cloud Technology Co.

WeiPHP is an open source WeChat public platform development framework, can easily build a personal WeChat public account operation platform. Shenzhen Yuanmeng Yun Technology Co. WeiPHP ap.php file file contains a file inclusion vulnerability, an attacker can use this vulnerability to obtain contr...

Command Execution Vulnerability in WeiPHP mo***.php File at Shenzhen Yuanmeng Cloud Technology Co.

WeiPHP is an open source WeChat public platform development framework, can easily build a personal WeChat public account operation platform. Shenzhen Yuanmeng Yun Technology Co., Ltd WeiPHP mo.php file has a command execution vulnerability that can be exploited by an attacker to gain control of t...

Command Execution Vulnerability in WeiPHP Ad***.cl***.php File at Shenzhen Yuanmeng Cloud Technology Co.

WeiPHP is an open source WeChat public platform development framework, can easily build a personal WeChat public account operation platform. Shenzhen Yuanmeng Yun Technology Co., Ltd WeiPHP Ad.cl.php file has a command execution vulnerability that can be exploited by attackers to gain control of...

File inclusion vulnerability in WeiPHP pl***.cl***.php file at Shenzhen Yuanmeng Cloud Technology Co.

WeiPHP is an open source WeChat public platform development framework, can easily build a personal WeChat public account operation platform. Shenzhen Yuanmeng Yun Technology Co., Ltd WeiPHP pl.cl.php file file contains a file inclusion vulnerability that can be exploited by an attacker to gain...

Command execution vulnerability in WeiPHP Pl***.cl***.php file at Shenzhen Yuanmeng Cloud Technology Co.

WeiPHP is an open source WeChat public platform development framework, can easily build a personal WeChat public account operation platform. Shenzhen Yuanmeng Yun Technology Co., Ltd WeiPHP Pl.cl.php file has a command execution vulnerability that can be exploited by an attacker to gain control o...

Weiphp5.0beta A***.php has an arbitrary file read vulnerability in Shenzhen Yuanmeng Cloud Technology Co.

WeiPHP is an open source WeChat public platform development framework, can easily build a personal WeChat public account operation platform. Shenzhen Yuanmeng Cloud Technology Co., Ltd Weiphp5.0beta A.php There is an arbitrary file reading vulnerability, which can be exploited by attackers to...

XSS vulnerability in weiphp plugin micro exam Qu***.php page

WeiPHP is an open source WeChat public platform development framework, can easily build a personal WeChat public account operation platform. An XSS vulnerability exists in the weiphp plugin microexamQu.php page. Attackers can use the vulnerability to insert malicious js code to obtain user cookie...

XSS vulnerability in weiphp plugin micro booking Re***.php page

WeiPHP is an open source WeChat public platform development framework, can easily build a personal WeChat public account operation platform. An XSS vulnerability exists in the weiphp plugin microappointmentRe.php page. Attackers can use the vulnerability to insert malicious js code to obtain user...

Weiphp 5.0beta official plugin microvoting frontend Vo***.php page has XSS vulnerability

WeiPHP is an open source WeChat public platform development framework, can easily build a personal WeChat public account operation platform. Weiphp5.0beta official plugin microvoting foreground Vo.php page exists XSS vulnerability. Attackers can use the vulnerability to insert malicious js code t...

WeiPHP suffers from XSS vulnerability (CNVD-2020-37939)

WeiPHP is a convenient and scalable open source WeChat public platform development framework, using it you can easily build a own WeChat public platform. WeiPHP XSS vulnerability , attackers can use the vulnerability to obtain sensitive information such as user cookies...

Command execution vulnerability in weiphp Ad***.cl***.php

WeiPHP is an open source WeChat public platform development framework, can easily build a personal WeChat public account operation platform. A command execution vulnerability exists in weiphp Ad.cl.php, which can be exploited by attackers to gain server privileges...