CVE-2021-40670

creationtimestamp| type| source ---|---|--- 2021-09-16 22:23:26+00:00| seen| https://t.me/cibsecurity/29003...

CVE-2021-40670

CVE-2021-40670 affects Wuzhi CMS 4.1.0. A SQL injection flaw exists in the keywords parameter exposed via /coreframe/app/order/admin/card.php, enabling manipulation of database queries. Multiple sources confirm the vulnerability and describe it as a SQL injection in Wuzhi CMS 4.1.0. CVSS metrics ...