CVE-2022-27431: SQL Injection
Published May 4, 2022
·Updated
Wuzhicms v4.1.0 was discovered to contain a SQL injection vulnerability via the groupid parameter at /coreframe/app/member/admin/group.php.
Affected Software
2 affected components
Wuzhicms Wuzhi Cms=4.1.0
Wuzhicms Wuzhicms=4.1.0
Event History
May 4, 2022
CVE Published
via MITRE·02:26 AM
Data Sourced
via MITRE·02:26 AM
Description
Data Sourced
via NVD·03:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this Wuzhicms issue?
The vulnerability ID for this Wuzhicms issue is CVE-2022-27431.
2
How severe is the CVE-2022-27431 vulnerability?
The severity of the CVE-2022-27431 vulnerability is critical with a severity value of 9.8.
3
What is the affected software for CVE-2022-27431?
The affected software for CVE-2022-27431 is Wuzhicms v4.1.0.
4
What is the description of the CVE-2022-27431 vulnerability?
The CVE-2022-27431 vulnerability is a SQL injection vulnerability via the groupid parameter at /coreframe/app/member/admin/group.php in Wuzhicms v4.1.0.
5
Is there any additional information available for CVE-2022-27431 vulnerability?
Yes, you can find additional information about the CVE-2022-27431 vulnerability at the following reference: https://github.com/wuzhicms/wuzhicms/issues/200