Lucene search
K

19 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2018-7749

Malware in sbrugna...

9.8CVSS9.3AI score0.00292EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2023/11/01 7:15 p.m.1 views

CVE-2023-46482

SQL injection vulnerability in wuzhicms v.4.1.0 allows a remote attacker to execute arbitrary code via the Database Backup Functionality in the coreframe/app/database/admin/index.php component...

9.8CVSS6.3AI score0.01963EPSS
Exploits1References2
Prion
Prion
added 2023/11/01 7:15 p.m.13 views

Sql injection

SQL injection vulnerability in wuzhicms v.4.1.0 allows a remote attacker to execute arbitrary code via the Database Backup Functionality in the coreframe/app/database/admin/index.php component...

7.5CVSS9.7AI score0.01963EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/11/01 12:0 a.m.11 views

CVE-2023-46482

SQL injection vulnerability in wuzhicms v.4.1.0 allows a remote attacker to execute arbitrary code via the Database Backup Functionality in the coreframe/app/database/admin/index.php component...

8.6AI score0.01963EPSS
Exploits1References1
NVD
NVD
added 2022/06/16 12:15 p.m.7 views

CVE-2021-41654

SQL injection vulnerabilities exist in Wuzhicms v4.1.0 which allows attackers to execute arbitrary SQL commands via the $keyValue parameter in /coreframe/app/pay/admin/index.php...

9.8CVSS0.00286EPSS
Exploits1References1
Cvelist
Cvelist
added 2022/06/16 11:22 a.m.16 views

CVE-2021-41654

SQL injection vulnerabilities exist in Wuzhicms v4.1.0 which allows attackers to execute arbitrary SQL commands via the $keyValue parameter in /coreframe/app/pay/admin/index.php...

10AI score0.00286EPSS
Exploits1References1
CNNVD
CNNVD
added 2021/09/20 12:0 a.m.1 views

Wuzhi WUZHI CMS SQL注入漏洞

Wuzhi WUZHI CMS is a PHP and MySQL based open source content management system CMS from Wuzhi. Wuzhi CMS suffers from a SQL injection vulnerability that originates from. Wuzhi CMS v4.1.0 suffers from a SQL injection vulnerability via the KeyValue parameter in coreframe app order admin index.php...

9.8CVSS8.6AI score0.00304EPSS
Exploits1References2
CNVD
CNVD
added 2021/09/17 12:0 a.m.19 views

WUZHI CMS SQL Injection Vulnerability (CNVD-2021-99300)

WUZHI CMS Five Fingers CMS is a high-performance open source content management system that supports LNAMP architecture, suitable for portals, enterprise websites, mobile sites, microsoft promotion. Attackers can use the keywords parameter in coreframe/app/promote/admin/index.php vulnerability fo...

9.8CVSS3.3AI score0.00264EPSS
Exploits1References1
NVD
NVD
added 2021/09/16 7:15 p.m.8 views

CVE-2021-40669

SQL Injection vulnerability exists in Wuzhi CMS 4.1.0 via the keywords parameter under the coreframe/app/promote/admin/index.php file...

9.8CVSS0.00264EPSS
Exploits1References1
Prion
Prion
added 2021/09/16 7:15 p.m.14 views

Sql injection

SQL Injection vulnerability exists in Wuzhi CMS 4.1.0 via the keywords parameter under the coreframe/app/promote/admin/index.php file...

7.5CVSS9.8AI score0.00264EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2021/09/16 6:2 p.m.6 views

CVE-2021-40669

SQL Injection vulnerability exists in Wuzhi CMS 4.1.0 via the keywords parameter under the coreframe/app/promote/admin/index.php file...

10AI score0.00264EPSS
Exploits1References1
CNNVD
CNNVD
added 2021/09/16 12:0 a.m.1 views

Wuzhi WUZHI CMS SQL注入漏洞

WUZHI CMS Five Fingers CMS is a high-performance open source content management system that supports LNAMP architecture, suitable for portals, enterprise websites, mobile sites, microsoft promotion. Attackers can use the keywords parameter in coreframe/app/promote/admin/index.php vulnerability fo...

9.8CVSS8.6AI score0.00264EPSS
Exploits1References2
NVD
NVD
added 2021/08/20 2:15 p.m.8 views

CVE-2020-18877

SQL Injection in Wuzhi CMS v4.1.0 allows remote attackers to obtain sensitive information via the 'flag' parameter in the component '/coreframe/app/order/admin/index.php'...

7.5CVSS0.00227EPSS
Exploits1References1
OSV
OSV
added 2021/08/20 2:15 p.m.9 views

CVE-2020-18877

SQL Injection in Wuzhi CMS v4.1.0 allows remote attackers to obtain sensitive information via the 'flag' parameter in the component '/coreframe/app/order/admin/index.php'...

7.5CVSS7.6AI score
Exploits0References1
Prion
Prion
added 2021/08/20 2:15 p.m.12 views

Sql injection

SQL Injection in Wuzhi CMS v4.1.0 allows remote attackers to obtain sensitive information via the 'flag' parameter in the component '/coreframe/app/order/admin/index.php'...

5CVSS7.7AI score0.00227EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2021/08/20 12:0 a.m.1 views

Wuzhi WUZHI CMS SQL注入漏洞

WUZHI CMS is a PHP and MySQL based open source content management system CMS from Wuzhi. Wuzhi CMS has a SQL injection vulnerability in v4.1.0, which originates from a flag in the product /coreframe/app/order/admin/index.php page that fails to properly filter the special characters of the input...

7.5CVSS6.1AI score0.00227EPSS
Exploits1References2
Cvelist
Cvelist
added 2021/04/02 7:58 p.m.7 views

CVE-2020-21590

Directory traversal in coreframe/app/template/admin/index.php in WUZHI CMS 4.1.0 allows attackers to list files in arbitrary directories via the dir parameter...

4.8AI score0.00126EPSS
Exploits1References2
Prion
Prion
added 2019/02/25 1:29 a.m.8 views

Cross site scripting

XSS exists in WUZHI CMS 4.1.0 via index.php?m=core&f=map&v=baidumap&x=XSS&y=XSS to coreframe/app/core/map.php...

4.3CVSS5.9AI score0.00223EPSS
Exploits1References2Affected Software1
Prion
Prion
added 2018/12/28 4:29 p.m.8 views

Sql injection

WUZHI CMS 4.1.0 allows coreframe/app/coupon/admin/copyfrom.php SQL injection via the index.php?m=promote&f=index&v=search keywords parameter, a related issue to CVE-2018-15893...

7.5CVSS9.8AI score0.00292EPSS
Exploits2References1Affected Software1
Rows per page
Query Builder