CVE-2025-0480

A vulnerability classified as problematic has been found in wuzhicms 4.1.0. This affects the function test of the file coreframe/app/search/admin/config.php. The manipulation of the argument sphinxhost/sphinxport leads to server-side request forgery. It is possible to initiate the attack remotely...

CVE-2025-0480: Server-Side Request Forgery (SSRF)

A vulnerability classified as problematic has been found in wuzhicms 4.1.0. This affects the function test of the file coreframe/app/search/admin/config.php. The manipulation of the argument sphinxhost/sphinxport leads to server-side request forgery. It is possible to initiate the attack remotely...

WUZHI CMS code-related vulnerabilities

WUZHI CMS is a PHP and MySQL based open source content management system CMS from WUZHI. A code issue vulnerability exists in WUZHI CMS version 4.1.0, which stems from the parameter sphinxhost/sphinxport being susceptible to server-side request forgery attacks...

PT-2025-3911

Name of the Vulnerable Software and Affected Versions wuzhicms version 4.1.0 Description A problematic issue has been found in the function test of the file coreframe/app/search/admin/config.php. The manipulation of the sphinxhost/sphinxport argument leads to server-side request forgery. It is...