755 matches found
CVE-2020-20124
Wuzhi CMS v4.1.0 contains a remote code execution RCE vulnerability in \attachment\admin\index.php...
CVE-2020-20124
Wuzhi CMS v4.1.0 contains a remote code execution RCE vulnerability in \attachment\admin\index.php...
CVE-2020-20124: Improper Control of Generation of Code
Wuzhi CMS v4.1.0 contains a remote code execution RCE vulnerability in \attachment\admin\index.php...
CVE-2021-40674
An SQL injection vulnerability exists in Wuzhi CMS v4.1.0 via the KeyValue parameter in coreframe/app/order/admin/index.php...
PT-2021-22941
Name of the Vulnerable Software and Affected Versions Wuzhi CMS version 4.1.0 Description An SQL injection issue exists via the KeyValue parameter in coreframe/app/order/admin/index.php. Recommendations For Wuzhi CMS version 4.1.0, consider restricting access to the KeyValue parameter in the...
CVE-2021-40674: Improper Neutralization of Special Elements used in an SQL Command
An SQL injection vulnerability exists in Wuzhi CMS v4.1.0 via the KeyValue parameter in coreframe/app/order/admin/index.php...
WUZHI CMS SQL Injection Vulnerability (CNVD-2021-99300)
WUZHI CMS Five Fingers CMS is a high-performance open source content management system that supports LNAMP architecture, suitable for portals, enterprise websites, mobile sites, microsoft promotion. Attackers can use the keywords parameter in coreframe/app/promote/admin/index.php vulnerability fo...
CVE-2021-40669
SQL Injection vulnerability exists in Wuzhi CMS 4.1.0 via the keywords parameter under the coreframe/app/promote/admin/index.php file...
CVE-2021-40669
SQL Injection vulnerability exists in Wuzhi CMS 4.1.0 via the keywords parameter under the coreframe/app/promote/admin/index.php file...
CVE-2021-40669
SQL Injection vulnerability exists in Wuzhi CMS 4.1.0 via the keywords parameter under the coreframe/app/promote/admin/index.php file...
PT-2021-22939
Name of the Vulnerable Software and Affected Versions Wuzhi CMS version 4.1.0 Description A SQL Injection issue exists via the keywords parameter under the coreframe/app/promote/admin/index.php file. This allows for potential exploitation. Recommendations For Wuzhi CMS version 4.1.0, consider...
CVE-2021-40669: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability exists in Wuzhi CMS 4.1.0 via the keywords parameter under the coreframe/app/promote/admin/index.php file...
CVE-2020-19049: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS in MyBB v1.8.20 allows remote attackers to inject arbitrary web script or HTML via the "Description" field found in the "Add New Forum" page by doing an authenticated POST HTTP request to '/Upload/admin/index.php?module=forum-management&action=add'...
Sql injection
SQL Injection in Wuzhi CMS v4.1.0 allows remote attackers to obtain sensitive information via the 'flag' parameter in the component '/coreframe/app/order/admin/index.php'...
PT-2021-10246
Name of the Vulnerable Software and Affected Versions: Wuzhi CMS version 4.1.0 Description: The issue allows remote attackers to obtain sensitive information via the flag parameter in the component "/coreframe/app/order/admin/index.php". This is a SQL Injection issue that can be exploited by...
CVE-2020-18877: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection in Wuzhi CMS v4.1.0 allows remote attackers to obtain sensitive information via the 'flag' parameter in the component '/coreframe/app/order/admin/index.php'...
PT-2021-10339
Name of the Vulnerable Software and Affected Versions: Metinfo version 7.0.0 Description: The issue allows attackers to perform a directory traversal and access sensitive information through the /admin/index.php?n=system&c=filept&a=doGetFileList endpoint. Recommendations: For Metinfo version 7.0....
CVE-2020-19304: Improper Limitation of a Pathname to a Restricted Directory
An issue in /admin/index.php?n=system&c=filept&a=doGetFileList of Metinfo v7.0.0 allows attackers to perform a directory traversal and access sensitive information...