3 matches found
Sql injection
WUZHI CMS 4.1.0 allows coreframe/app/coupon/admin/copyfrom.php SQL injection via the index.php?m=promote&f=index&v=search keywords parameter, a related issue to CVE-2018-15893...
7.5CVSS9.8AI score0.01537EPSS
SaveExploits2References1Affected Software1
CVE-2018-20572
WUZHI CMS 4.1.0 allows coreframe/app/coupon/admin/copyfrom.php SQL injection via the index.php?m=promote&f=index&v=search keywords parameter, a related issue to CVE-2018-15893...
9.8CVSS0.01537EPSS
SaveExploits1References1
CVE-2018-20572: Improper Neutralization of Special Elements used in an SQL Command
WUZHI CMS 4.1.0 allows coreframe/app/coupon/admin/copyfrom.php SQL injection via the index.php?m=promote&f=index&v=search keywords parameter, a related issue to CVE-2018-15893...
9.8CVSS8.2AI score0.01537EPSS
SaveExploits1References2
20