CVE-2018-17852

WUZHI CMS 4.1.0 is affected by a SQL injection in coreframe/app/coupon/admin/card.php via the groupname parameter of /index.php?m=coupon&f=card&v=detail_listing. CVSSv3 base score 9.8 (CRITICAL) with network attack, no authentication, and high impact on C/I/A. Vulnerable file and parameter are sp...