Lucene search
+L

3 matches found

OSV
OSV
added 2021/09/16 7:15 p.m.22 views

CVE-2021-40670

SQL Injection vulnerability exists in Wuzhi CMS 4.1.0 via the keywords iparameter under the /coreframe/app/order/admin/card.php file...

9.8CVSS8.1AI score
SaveExploits0References1
CVE
CVE
added 2021/09/16 6:45 p.m.54 views

CVE-2021-40670

CVE-2021-40670 affects Wuzhi CMS 4.1.0. A SQL injection flaw exists in the keywords parameter exposed via /coreframe/app/order/admin/card.php, enabling manipulation of database queries. Multiple sources confirm the vulnerability and describe it as a SQL injection in Wuzhi CMS 4.1.0. CVSS metrics ...

9.8CVSS9.8AI score0.0128EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2021/09/16 6:45 p.m.29 views

CVE-2021-40670

SQL Injection vulnerability exists in Wuzhi CMS 4.1.0 via the keywords iparameter under the /coreframe/app/order/admin/card.php file...

10AI score0.0128EPSS
SaveExploits1References1
Rows per page
Query Builder