Lucene search
+L

8 matches found

NVD
NVD
•added 2026/09/15 4:17 p.m.•13 views

CVE-2026-91848

A vulnerability was identified in WuzhiCMS up to 4.1.0. Affected by this issue is the function article::getDataOfJson of the file /index.php?m=content&f=article&v=getDataOfJson. The manipulation of the argument title/mastertable leads to sql injection. Remote exploitation of the attack is possibl...

7.5CVSS0.00431EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/15 3:15 p.m.•16 views

EUVD-2026-78784

A vulnerability was identified in WuzhiCMS up to 4.1.0. Affected by this issue is the function article::getDataOfJson of the file /index.php?m=content&f=article&v=getDataOfJson. The manipulation of the argument title/mastertable leads to sql injection. Remote exploitation of the attack is possibl...

7.5CVSS6.8AI score0.00431EPSS
SaveExploits0References6
OSV
OSV
•added 2026/09/15 3:15 p.m.•10 views

CVE-2026-91848 WuzhiCMS index.php getDataOfJson sql injection

A vulnerability was identified in WuzhiCMS up to 4.1.0. Affected by this issue is the function article::getDataOfJson of the file /index.php?m=content&f=article&v=getDataOfJson. The manipulation of the argument title/mastertable leads to sql injection. Remote exploitation of the attack is possibl...

6.9CVSS5.4AI score
SaveExploits0References8
CVE
CVE
•added 2026/09/15 3:15 p.m.•16 views

CVE-2026-91848

CVE-2026-91848 is a SQL injection vulnerability in WuzhiCMS up to 4.1.0 , specifically in the article::getDataOfJson function accessed via /index.php?m=content&f=article&v=getDataOfJson. Manipulating the title or master_table arguments allows a remote, unauthenticated attacker to inject SQL, resu...

7.5CVSS6.8AI score0.00431EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/09/15 3:15 p.m.•32 views

CVE-2026-91848 WuzhiCMS index.php getDataOfJson sql injection

A vulnerability was identified in WuzhiCMS up to 4.1.0. Affected by this issue is the function article::getDataOfJson of the file /index.php?m=content&f=article&v=getDataOfJson. The manipulation of the argument title/mastertable leads to sql injection. Remote exploitation of the attack is possibl...

7.5CVSS0.00431EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/09/15 3:15 p.m.•13 views

CVE-2026-91848 WuzhiCMS index.php getDataOfJson sql injection

A vulnerability was identified in WuzhiCMS up to 4.1.0. Affected by this issue is the function article::getDataOfJson of the file /index.php?m=content&f=article&v=getDataOfJson. The manipulation of the argument title/mastertable leads to sql injection. Remote exploitation of the attack is possibl...

7.5CVSS6.8AI score0.00431EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•17 views

PT-2026-92048

Name of the Vulnerable Software and Affected Versions WuzhiCMS versions prior to 4.1.1 Description A SQL injection issue exists in the article::getDataOfJson function within the '/index.php?m=content&f=article&v=getDataOfJson' endpoint. This occurs when the title/master table argument is...

7.5CVSS7.2AI score0.00431EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•1 views

CVE-2026-91848: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in WuzhiCMS up to 4.1.0. Affected by this issue is the function article::getDataOfJson of the file /index.php?m=content&f=article&v=getDataOfJson. The manipulation of the argument title/mastertable leads to sql injection. Remote exploitation of the attack is possibl...

7.5CVSS6.8AI score0.00431EPSS
SaveExploits0References3
Rows per page
Query Builder