Vulnerabilities

TI-2018-13419 CVE-2018-18939 · GHSA-qvw9-mcfp-f9v8

An issue was discovered in WUZHI CMS 4.1.0.

LOW 23

An issue was discovered in WUZHI CMS 4.1.0.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.0067 Published 2018-11-05 No fix listed CWE-79

TI-2018-12689 CVE-2018-17852 · GHSA-r8mp-qf55-3cq5

A SQL injection was discovered in WUZHI CMS 4.1.0 in coreframe/app/coupon/admin/card.php…

MEDIUM 45

A SQL injection was discovered in WUZHI CMS 4.1.0 in coreframe/app/coupon/admin/card.php via the groupname parameter to the /index.php?m=coupon&f=card&v=detail_listing URI.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01537 Published 2018-10-01 No fix listed CWE-89

TI-2018-11714 CVE-2018-16350 · GHSA-mvq7-4h39-6963

WUZHI CMS 4.1.0 has XSS via the index.php?m=core&f=set&v=basic form[statcode] parameter.

LOW 29

WUZHI CMS 4.1.0 has XSS via the index.php?m=core&f=set&v=basic form[statcode] parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00865 Published 2018-09-02 No fix listed CWE-79

TI-2018-11713 CVE-2018-16349 · GHSA-7jcw-f8cp-82p5

WUZHI CMS 4.1.0 has XSS via the index.php?m=link&f=index&v=add form[remark] parameter.

LOW 29

WUZHI CMS 4.1.0 has XSS via the index.php?m=link&f=index&v=add form[remark] parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00865 Published 2018-09-02 No fix listed CWE-79

TI-2018-11333 CVE-2018-15894 · GHSA-x6r9-8x7w-8vg7

A SQL injection was discovered in /coreframe/app/admin/pay/admin/index.php in WUZHI CMS…

MEDIUM 45

A SQL injection was discovered in /coreframe/app/admin/pay/admin/index.php in WUZHI CMS 4.1.0 via the index.php?m=pay&f=index&v=listing keyValue parameter.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01537 Published 2018-08-27 No fix listed CWE-89

TI-2018-11332 CVE-2018-15893 · GHSA-r4m2-p844-p4vg

A SQL injection was discovered in /coreframe/app/admin/copyfrom.php in WUZHI CMS 4.1.0…

MEDIUM 45

A SQL injection was discovered in /coreframe/app/admin/copyfrom.php in WUZHI CMS 4.1.0 via the index.php?m=core&f=copyfrom&v=listing keywords parameter.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01537 Published 2018-08-27 No fix listed CWE-89

TI-2018-10410 CVE-2018-14515 · GHSA-w7x6-fxvx-p458

A SQL injection was discovered in WUZHI CMS 4.1.0 that allows remote attackers to inject…

MEDIUM 46

A SQL injection was discovered in WUZHI CMS 4.1.0 that allows remote attackers to inject a malicious SQL statement via the index.php?m=promote&f=index&v=search keywords parameter.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02002 Published 2018-07-23 No fix listed CWE-89

TI-2018-10408 CVE-2018-14513 · GHSA-gjm8-c5mm-r579

An XSS vulnerability was discovered in WUZHI CMS 4.1.0.

LOW 29

An XSS vulnerability was discovered in WUZHI CMS 4.1.0.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01095 Published 2018-07-23 No fix listed CWE-79

Vulnerabilities

Filters