CVE-2021-40669: SQL Injection
SQL Injection vulnerability exists in Wuzhi CMS 4.1.0 via the keywords parameter under the coreframe/app/promote/admin/index.php file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-40669?
The severity of CVE-2021-40669 is critical, with a CVSS score of 9.8.
How does the SQL Injection vulnerability in Wuzhi CMS 4.1.0 work?
The SQL Injection vulnerability in Wuzhi CMS 4.1.0 occurs when an attacker is able to inject malicious SQL queries through the 'keywords' parameter in the 'coreframe/app/promote/admin/index.php' file.
How can I check if I am affected by CVE-2021-40669?
If you are using Wuzhi CMS version 4.1.0, you are affected by CVE-2021-40669.
Is there a fix available for CVE-2021-40669?
Yes, a fix for CVE-2021-40669 is available. It is recommended to update Wuzhi CMS to a version that has the vulnerability patched.
Where can I find more information about CVE-2021-40669?
More information about CVE-2021-40669 can be found at the following reference: [GitHub Issue](https://github.com/wuzhicms/wuzhicms/issues/196)