2 matches found
WUZHI CMS SQL Injection Vulnerability (CNVD-2022-36985)
Wuzhi WUZHI CMS is a PHP and MySQL based open source content management system CMS from Wuzhi.WUZHI CMS version 4.1.0 is vulnerable to SQL injection, which originates from the grouppid parameter of /coreframe/app/member/admin/group.php. parameter lacks validation for external input SQL statements...
9.8CVSS4.7AI score0.01064EPSS
SaveExploits1References1
WUZHI CMS SQL注入漏洞
Wuzhi WUZHI CMS is a PHP and MySQL based open source content management system CMS from Wuzhi.WUZHI CMS version 4.1.0 is vulnerable to SQL injection, which originates from the grouppid parameter of /coreframe/app/member/admin/group.php. parameter lacks validation for external input SQL statements...
9.8CVSS8.6AI score0.01064EPSS
SaveExploits1References2
20