10 matches found
CVE-2026-92380
A flaw has been found in WuzhiCMS up to 4.1.0. The impacted element is the function ckditor::saveRemote of the file coreframe/app/attachment/index.php of the component Remote Image Fetch. This manipulation of the argument source causes server-side request forgery. The attack can be initiated...
EUVD-2026-80792
A flaw has been found in WuzhiCMS up to 4.1.0. The impacted element is the function ckditor::saveRemote of the file coreframe/app/attachment/index.php of the component Remote Image Fetch. This manipulation of the argument source causes server-side request forgery. The attack can be initiated...
CVE-2026-92380 WuzhiCMS Remote Image Fetch index.php saveRemote server-side request forgery
A flaw has been found in WuzhiCMS up to 4.1.0. The impacted element is the function ckditor::saveRemote of the file coreframe/app/attachment/index.php of the component Remote Image Fetch. This manipulation of the argument source causes server-side request forgery. The attack can be initiated...
CVE-2026-92380
WuzhiCMS up to 4.1.0 is affected by a server-side request forgery (SSRF) vulnerability in the Remote Image Fetch component. The flaw resides in the function ckditor::saveRemote within coreframe/app/attachment/index.php , where manipulation of the source[] argument allows an unauthenticated, remot...
CVE-2026-92380 WuzhiCMS Remote Image Fetch index.php saveRemote server-side request forgery
A flaw has been found in WuzhiCMS up to 4.1.0. The impacted element is the function ckditor::saveRemote of the file coreframe/app/attachment/index.php of the component Remote Image Fetch. This manipulation of the argument source causes server-side request forgery. The attack can be initiated...
PT-2026-93807
Name of the Vulnerable Software and Affected Versions WuzhiCMS versions prior to 4.1.1 Description A server-side request forgery SSRF exists in the Remote Image Fetch component. This occurs when the ckditor::saveRemote function in the coreframe/app/attachment/index.php file improperly handles the...
CVE-2026-92380: Server-Side Request Forgery (SSRF)
A flaw has been found in WuzhiCMS up to 4.1.0. The impacted element is the function ckditor::saveRemote of the file coreframe/app/attachment/index.php of the component Remote Image Fetch. This manipulation of the argument source causes server-side request forgery. The attack can be initiated...
EUVD-2020-11457
Malware in sbrugna...
CVE-2020-19553
Cross Site Scripting XSS vlnerability exists in WUZHI CMS up to and including 4.1.0 in the config function in coreframe/app/attachment/libs/class/ckditor.class.php...
Wuzhi WUZHI CMS Cross-Site Scripting Vulnerability
Wuzhi WUZHI CMS is a PHP and MySQL based open source content management system CMS from Wuzhi. A security vulnerability exists in WUZHI CMS 4.1.0 and later, which originates from the coreframe/app/attachment/libs/class/ckditor.class.php configuration function...