PT-2022-18761

Name of the Vulnerable Software and Affected Versions Purchase Order Management System version 1.0 Description A remote code execution issue was found in the Purchase Order Management System, which can be exploited via the "/purchase order/admin/?page=user" API endpoint. Recommendations For...

Wuzhi WUZHI CMS SQL注入漏洞

WUZHI CMS is a PHP and MySQL based open source content management system CMS from Wuzhi. Wuzhi CMS has a SQL injection vulnerability in v4.1.0, which originates from a flag in the product /coreframe/app/order/admin/index.php page that fails to properly filter the special characters of the input...