Browse CVEs

CRITICAL 9.8 CVE-2018-17852 A SQL injection was discovered in WUZHI CMS 4.1.0 in coreframe/app/coupon/admin/card.php via the groupname parameter to the /index.php?m=coupon&f=car… Wuzhi Cms No fix yet Fix from $2,3002018-10-01 MEDIUM 6.1 CVE-2018-16349 WUZHI CMS 4.1.0 has XSS via the index.php?m=link&f=index&v=add form[remark] parameter. Wuzhi Cms No fix yet Fix from $1,6002018-09-02 MEDIUM 6.1 CVE-2018-16350 WUZHI CMS 4.1.0 has XSS via the index.php?m=core&f=set&v=basic form[statcode] parameter. Wuzhi Cms No fix yet Fix from $1,6002018-09-02 CRITICAL 9.8 CVE-2018-15893 A SQL injection was discovered in /coreframe/app/admin/copyfrom.php in WUZHI CMS 4.1.0 via the index.php?m=core&f=copyfrom&v=listing keywords paramet… Wuzhi Cms No fix yet Fix from $2,3002018-08-27 CRITICAL 9.8 CVE-2018-15894 A SQL injection was discovered in /coreframe/app/admin/pay/admin/index.php in WUZHI CMS 4.1.0 via the index.php?m=pay&f=index&v=listing keyValue para… Wuzhi Cms No fix yet Fix from $2,3002018-08-27 CRITICAL 9.8 CVE-2018-14515 A SQL injection was discovered in WUZHI CMS 4.1.0 that allows remote attackers to inject a malicious SQL statement via the index.php?m=promote&f=inde… Wuzhi Cms No fix yet Fix from $2,3002018-07-23 MEDIUM 6.1 CVE-2018-14513 An XSS vulnerability was discovered in WUZHI CMS 4.1.0. There is persistent XSS that allows remote attackers to inject arbitrary web script or HTML v… Wuzhi Cms No fix yet Fix from $1,6002018-07-23