WUZHI CMS SQL Injection Vulnerability (CNVD-2022-36985)

Wuzhi WUZHI CMS is a PHP and MySQL based open source content management system CMS from Wuzhi.WUZHI CMS version 4.1.0 is vulnerable to SQL injection, which originates from the grouppid parameter of /coreframe/app/member/admin/group.php. parameter lacks validation for external input SQL statements...