CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

Rapid7 Vulnerability Database (full)•added 2019/03/07 12:00 a.m.•6 views

CVE-2018-17426: Improper Neutralization of Input During Web Page Generation

WUZHI CMS 4.1.0 has stored XSS via the "Extension module" "SMS in station" field under the index.php?m=core URI...

5.4CVSS5.8AI score0.00684EPSS

SaveExploits1References2

Rapid7 Vulnerability Database (full)•added 2018/11/05 12:00 a.m.•5 views

CVE-2018-18939: Improper Neutralization of Input During Web Page Generation

An issue was discovered in WUZHI CMS 4.1.0. There is stored XSS in index.php?m=core&f=index via a seventh input field...

4.8CVSS5.5AI score0.0067EPSS

SaveExploits1References2

Rapid7 Vulnerability Database (full)•added 2018/10/27 12:00 a.m.•4 views

CVE-2018-18711: Cross-Site Request Forgery (CSRF)

An issue was discovered in WUZHI CMS 4.1.0. There is a CSRF vulnerability that can change the super administrator's password via index.php?m=core&f=panel&v=editinfo...

8.8CVSS7.8AI score0.0065EPSS

SaveExploits1References2

Rapid7 Vulnerability Database (full)•added 2018/09/02 12:00 a.m.•4 views

CVE-2018-16350: Improper Neutralization of Input During Web Page Generation

WUZHI CMS 4.1.0 has XSS via the index.php?m=core&f=set&v=basic formstatcode parameter...

6.1CVSS6.3AI score0.00865EPSS

SaveExploits1References2

Rapid7 Vulnerability Database (full)•added 2018/04/10 12:00 a.m.•3 views

CVE-2018-9926: Cross-Site Request Forgery (CSRF)

An issue was discovered in WUZHI CMS 4.1.0. There is a CSRF vulnerability that can add an admin account via index.php?m=core&f=power&v=add...

8.8CVSS7.8AI score0.02927EPSS

SaveExploits5References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by