WUZHI CMS Cross-Site Request Forgery Vulnerability (CNVD-2018-08779)

WUZHI CMS is China's five fingers WUZHI Internet technology company based on PHP and MySQL open source content management system CMS. A cross-site request forgery vulnerability exists in WUZHI CMS version 4.1.0. A remote attacker can use index.php?m=content&f=content&v=recycledelete to delete any...

CVE-2018-10248

An issue was discovered in WUZHI CMS 4.1.0. There is a CSRF vulnerability that can delete any article via index.php?m=content&f=content&v=recycledelete...

CVE-2018-10248

WUZHI CMS 4.1.0 is affected by a CSRF vulnerability that allows deleting any article via the endpoint index.php?m=content&f=content&v=recycle_delete. The issue is described across multiple sources (NVD entry, Red Hat advisory, CNVD/CVELIST, and others) as a CSRF that can delete articles, with the...

PT-2018-9781 · Wuzhi · Wuzhi Cms

Name of the Vulnerable Software and Affected Versions: WUZHI CMS version 4.1.0 Description: A CSRF issue allows deletion of any article via the "index.php?m=content&f=content&v=recycle delete" endpoint. Recommendations: For WUZHI CMS version 4.1.0, update to a newer version that contains a fix fo...