CVE-2023-5294

A vulnerability has been found in ECshop 4.1.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/order.php. The manipulation of the argument goodsid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed ...

PT-2022-18761

Name of the Vulnerable Software and Affected Versions Purchase Order Management System version 1.0 Description A remote code execution issue was found in the Purchase Order Management System, which can be exploited via the "/purchase order/admin/?page=user" API endpoint. Recommendations For...

CVE-2021-40674

An SQL injection vulnerability exists in Wuzhi CMS v4.1.0 via the KeyValue parameter in coreframe/app/order/admin/index.php...

CVE-2021-40674

An SQL injection vulnerability exists in Wuzhi CMS v4.1.0 via the KeyValue parameter in coreframe/app/order/admin/index.php...

PT-2021-22941

Name of the Vulnerable Software and Affected Versions Wuzhi CMS version 4.1.0 Description An SQL injection issue exists via the KeyValue parameter in coreframe/app/order/admin/index.php. Recommendations For Wuzhi CMS version 4.1.0, consider restricting access to the KeyValue parameter in the...

Wuzhi WUZHI CMS SQL注入漏洞

Wuzhi WUZHI CMS is a PHP and MySQL based open source content management system CMS from Wuzhi. Wuzhi CMS suffers from a SQL injection vulnerability that originates from. Wuzhi CMS v4.1.0 suffers from a SQL injection vulnerability via the KeyValue parameter in coreframe app order admin index.php...

CVE-2021-40674: Improper Neutralization of Special Elements used in an SQL Command

An SQL injection vulnerability exists in Wuzhi CMS v4.1.0 via the KeyValue parameter in coreframe/app/order/admin/index.php...

CVE-2021-40670

SQL Injection vulnerability exists in Wuzhi CMS 4.1.0 via the keywords iparameter under the /coreframe/app/order/admin/card.php file...

Sql injection

SQL Injection vulnerability exists in Wuzhi CMS 4.1.0 via the keywords iparameter under the /coreframe/app/order/admin/card.php file...

CVE-2021-40670

SQL Injection vulnerability exists in Wuzhi CMS 4.1.0 via the keywords iparameter under the /coreframe/app/order/admin/card.php file...

CVE-2021-40670

SQL Injection vulnerability exists in Wuzhi CMS 4.1.0 via the keywords iparameter under the /coreframe/app/order/admin/card.php file...

Wuzhi WUZHI CMS SQL注入漏洞

WUZHI CMS Five Fingers CMS is a high-performance open source content management system that supports the LNAMP architecture, suitable for portals, corporate websites, mobile sites, microsoft promotion. WUZHI CMS version 4.1.0 has a SQL injection vulnerability. The attacker can use the keywords...

PT-2021-22940

Name of the Vulnerable Software and Affected Versions Wuzhi CMS version 4.1.0 Description A SQL Injection issue exists via the keywords parameter under the "/coreframe/app/order/admin/card.php" file. Recommendations For Wuzhi CMS version 4.1.0, consider restricting access to the...

Sql injection

SQL Injection in Wuzhi CMS v4.1.0 allows remote attackers to obtain sensitive information via the 'flag' parameter in the component '/coreframe/app/order/admin/index.php'...

CVE-2020-18877

SQL Injection in Wuzhi CMS v4.1.0 allows remote attackers to obtain sensitive information via the 'flag' parameter in the component '/coreframe/app/order/admin/index.php'...

PT-2021-10246

Name of the Vulnerable Software and Affected Versions: Wuzhi CMS version 4.1.0 Description: The issue allows remote attackers to obtain sensitive information via the flag parameter in the component "/coreframe/app/order/admin/index.php". This is a SQL Injection issue that can be exploited by...

Wuzhi WUZHI CMS SQL注入漏洞

WUZHI CMS is a PHP and MySQL based open source content management system CMS from Wuzhi. Wuzhi CMS has a SQL injection vulnerability in v4.1.0, which originates from a flag in the product /coreframe/app/order/admin/index.php page that fails to properly filter the special characters of the input...

CVE-2020-18877: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in Wuzhi CMS v4.1.0 allows remote attackers to obtain sensitive information via the 'flag' parameter in the component '/coreframe/app/order/admin/index.php'...

CVE-2018-14472

An issue was discovered in WUZHI CMS 4.1.0. The vulnerable file is coreframe/app/order/admin/goods.php. The $keywords parameter is taken directly into execution without any filtering, leading to SQL injection...

PT-2018-12541

Name of the Vulnerable Software and Affected Versions WUZHI CMS version 4.1.0 Description An issue was discovered in the coreframe/app/order/admin/goods.php file, where the keywords parameter is taken directly into execution without filtering, leading to SQL injection. Recommendations For WUZHI C...