CVE-2024-2015

A vulnerability, which was classified as critical, has been found in ZhiCms 4.0. This issue affects the function getindexdata of the file app/index/controller/mcontroller.php. The manipulation of the argument key leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2024-2015 ZhiCms mcontroller.php getindexdata sql injection

A vulnerability, which was classified as critical, has been found in ZhiCms 4.0. This issue affects the function getindexdata of the file app/index/controller/mcontroller.php. The manipulation of the argument key leads to sql injection. The attack may be initiated remotely. The exploit has been...

PT-2024-18627 · Zhicms · Zhicms

Name of the Vulnerable Software and Affected Versions: ZhiCms version 4.0 Description: A critical issue has been found in ZhiCms, affecting the getindexdata function of the file app/index/controller/mcontroller.php. The manipulation of the key argument leads to SQL injection. The attack may be...