WeiPHP 5.0 - Path Traversal

WeiPHP 5.0 contains a path traversal caused by insufficient input validation of the picUrl parameter in /public/index.php/material/Material/downloadimgage, letting unauthenticated remote attackers read arbitrary files. id: CVE-2025-34045 info: name: WeiPHP 5.0 - Path Traversal author: pikpikcu...

CVE-2025-55849

CVE-2025-55849 involves WeiPHP v5.0 and earlier, where a SQL injection is reported in SucaiController.class.php and the cancelTemplatee function. The CVSS 3.1 base metrics indicate a HIGH impact with local attack vector, no privileges or user interaction required, and full confidentiality/integri...

Weiphp SQL注入漏洞

weiphp is an open source, efficient and simple microsoft development platform. A SQL injection vulnerability exists in the wpwhere function in WeiPHP 5.0. No detailed vulnerability details are provided at this time...

File inclusion vulnerability in WeiPHP Ad***.cl***.php file at Shenzhen Yuanmeng Cloud Technology Co.

WeiPHP is an open source WeChat public platform development framework, can easily build a personal WeChat public account operation platform. Shenzhen Yuanmeng Yun Technology Co., Ltd WeiPHP Ad.cl.php file file contains a file inclusion vulnerability, which can be exploited by an attacker to gain...

WeiPHP 5.0beta frontend has an override access vulnerability

WeiPHP is an open source WeChat public platform development framework, can easily build a personal WeChat public account operation platform. WeiPHP5.0beta front-end has an override access vulnerability. The vulnerability stems from the user operation does not verify the identity, the attacker can...

File upload vulnerability in WeiPHP 4.0beta frontend

WeiPHP is an open source WeChat public platform development framework, can easily build a personal WeChat public account operation platform. A file upload vulnerability exists in WeiPHP 4.0 beta, as ApiController.class.php fails to strictly filter input parameters. A remote attacker can exploit...

WeiPHP v4.0 beta SQL Injection Vulnerability in Frontend AppsLinkController.class.php Page

WeiPHP is an open source WeChat public platform development framework, can easily build a personal WeChat public account operation platform. WeiPHP v4.0 beta SQL injection vulnerability exists in the front-end AppsLinkController.class.php page. The vulnerability is due to the public function del...