Lucene search
K

4 matches found

VulnCheck KEV
VulnCheck KEV
added 2025/06/26 12:0 a.m.1 views

VulnCheck KEV: CVE-2025-34045

A path traversal vulnerability exists in WeiPHP 5.0, an open source WeChat public account platform development framework by Shenzhen Yuanmengyun Technology Co., Ltd. The flaw occurs in the picUrl parameter of the /public/index.php/material/Material/downloadimgage endpoint, where insufficient inpu...

8.7CVSS6AI score0.28086EPSS
In wildExploits1References34
CNNVD
CNNVD
added 2025/06/26 12:0 a.m.2 views

Weiphp WeiPHP 路径遍历漏洞

Weiphp WeiPHP is a WeChat development platform that supports the development of public numbers and small programs by China's Shenzhen Yuanmeng Yun Weiphp company. Weiphp WeiPHP 5.0 version of the existence of path traversal vulnerability, the vulnerability stems from the file...

8.7CVSS6.5AI score0.28086EPSS
Exploits1References4
OSV
OSV
added 2024/02/09 1:15 a.m.2 views

CVE-2024-1353

A vulnerability, which was classified as critical, has been found in PHPEMS up to 1.0. Affected by this issue is the function index of the file app/weixin/controller/index.api.php. The manipulation of the argument picurl leads to deserialization. The exploit has been disclosed to the public and m...

9.8CVSS5.3AI score0.00073EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/02/09 12:0 a.m.3 views

PHPEMS 代码问题漏洞

PHPEMS is a PHP online mock exam system. PHPEMS has a deserialization vulnerability, the vulnerability arises because there is a function index in app/weixin/controller/index.api.php, which can be exploited by an attacker to cause deserialization via the parameter picurl...

9.8CVSS7AI score0.00073EPSS
Exploits0References4
Rows per page
Query Builder